Integrate Bamboo with JIRA behind firewall
Asked by Emad Ibrahim:

I have a JIRA server that is external facing i.e. outside the firewall.

I have a Bamboo server that is inside the firewall.

Bamboo server can see JIRA server

JIRA server cannot see Bamboo server

How can I configure Bamboo to use JIRA users and Groups? I tried adding a 1-way application link from Bamboo to JIRA and it added but I cannot enable Bamboo to use "Users and groups from JIRA or Crowd" because it is asking me for a username and password for the applicaiton... Where can I create that?

Also, is this a support setup? I cannot host bamboo outside the firewall because I need to run tests that depend on accessing the database which is inside the firewall.


Answers:
author: rsperafico
body: Hi Emad,

I would kindly ask you to follow the steps as per below:

**Lets start by setting up JIRA**

1. Start JIRA
2. Log in using an account with administrator privilegies.
3. Go to "**User Management** " \>\> "**Groups** "  
   3.1 Add a new groupd called "bamboo-admin"
4. Go to "**User Management** " \>\> "**Users** " \>\> "**Operations** " \>\> "**Groups** "  
   4.1 Join in your currently user to "bamboo-admin" group.
5. Go to "**User Management** " \>\> "**JIRA User Server** " \>\> "**Add Application** "  
   5.1 Type in the "**Application name** " (*e.g: bamboo* )  
   5.2 Type in a "**Password** "  
   5.3 Type in the "**IP Address** " to your Bamboo instance (*e.g: 192.168.10.23* )  
   5.4 Click on Save

*Please remember the "**Application name** " and "**Password**" used as it will be needed in Bamboo to establish a link between them.*

**Lets move on to Bamboo.**

As you have mentioned, you are not able to log in to your Bamboo instance. In order to grant access to the local user management (Bamboo), please follow the steps:

Open up \<tt\>\<bamboo-home\>/xml-data/configuration/atlassian-user.xml\</tt\> and replace its content with**ONLY** the following:  

```
<atlassian-user>    <repositories>        <hibernate name="Hibernate Repository" key="hibernateRepository" description="Hibernate Repository" cache="true"/>    </repositories></atlassian-user>
```

```
?
```

Start Bamboo and log in with your local admin.  
If they don't know/remember the password, following the instructions on this page:[Restoring passwords to recover admin users](https://confluence.atlassian.com/display/BAMBOO/Restoring+passwords+to+recover+admin+users), ask them to reset your local Bamboo admin password by replacing the hash with:  

```
{PKCS5S2}Bpkvn//DVjxjm/gSwKsLjDIt06e2Bfj9RHA5Z8mfMhMVGJkl9itnpzKST+BcHeFf
```

which is equal to "admin" and try to login with admin username and the password: "admin".

If you are able to successfully login now, please try to integrate with Crowd/JIRA again and let us know if the problem still persists.

Now that you have access to your Bamboo, lets finish up the communication between Bamboo and JIRA.

1. Start Bamboo
2. Log in using an account with administrator privilegies.
3. Go to "**Bamboo administration"** \>\> "**Security** " \>\> "**User repository** "  
   3.1 Select "**Users and groups from JIRA or Crowd** "  
   3.2 Type in your JIRA url into "**Server URL** " (*e.g.:[](http://192.168.10.22:8080/%3Ccontextpath)http://192.168.10.22:8080/\<contextpath\>* )  
   *Please notice I am not using proxy to it.* Instead, I am using the IP address from the server where my JIRA instance is running. Added to that is the port used by Tomcat to the JIRA instance.  
   In case you are unsure about the port number, please refer to:  
   **\<jira-install\>/conf/server.xml**  

   ```
   (...)<Service name="Catalina">        <Connector port="8080"(...)
   ```

   In case you have a context path (path="") set to JIRA instance, please refer to:  
   **\<jira-install\>/conf/server.xml**  

   ```
   (...)<Context path="" docBase="${catalina.home}/atlassian-jira" reloadable="false" useHttpOnly="true">(...)?
   ```

   In the context above, you can notice I am not using any path. Here is an example of context path (*path="/jira"* ) and you would access it as per[](http://192.168.10.22/8080/jira)<http://192.168.10.22/8080/jira>.  
   3.3. Type in the application name you have set in JIRA into "**Application name** " (*e.g.: bamboo* )   
   3.4. Click on "**Change password?** " and type in the password you have set for the application name into "**Password** "  
   3.5. Click on "**Save** "  
   3.6. Click on "**Synchronize now**"

Now you are able to log in to Bamboo using JIRA authentication.

Please refer to [Integrating Bamboo with Crowd](https://confluence.atlassian.com/display/BAMBOO/Integrating+Bamboo+with+Crowd) for further information.

--

Kind regards,

Rafael