youngmon/atlassian-qna huggingface dataset:
Licence query after integrating Jira and confluence with crowd
Asked by Shravanthi Sudarshana:

We already have Jira and Confluence instances up and running. We are in the process of evaluating crowd before taking it to production. We had one query with number of users allowed after integration.

Currently, in Jira we have license for 2000 users only. (1400 users present as of now)

And in Confluence, we have for 2000+ users. ( 2000 plus users present as of now)

When we integrate crowd with Jira and Confluence and enable SSO, all users present in confluence are seen in Jira as well. So effectively, we see union of both application users in Jira as well as confluence. (which is 2221 as of now). Since we have licence only for 2000 user in Jira, we were wondering if we will face any issue after integrating Jira with Crowd.

Please help us understand the licencing procedure with crowd. After integration, does it mean we will get license for 2000(jira) + 2000(confluence) licenses? So that we can use one license for a user present in both jira and confluence? That would minimize the licensing costs. Please clarify the same.

Thanks


Answers:
author: Septa Cahyadiputra
body: Hi Shravanthi,

Please note that each applications have a different way of counting their licensed users. For example, JIRA count the licensed users by counting users that have "[JIRA User](https://confluence.atlassian.com/display/JIRA/Managing+Global+Permissions)" permission. So even if it integrated with Crowd, as long as the amount of users that have "JIRA User" permission is still less than 2000 you should be fine.

Confluence count the amount of licensed users by counting the users that have "[Can-Use](https://confluence.atlassian.com/display/DOC/Global+Permissions+Overview)" permission. Same like JIRA, even if its integrated with Crowd, if the amount of users that have "Can-Use" permission is less than 2000 you should be fine.

For Crowd, Crowd will count the amount of licensed users by counting users that have the capability to authenticate against Crowd or any other applications integrated with it. For example you have 150 unique users. 60 unique users can authenticate against Confluence. Out of those 60, 30 can authenticate againts JIRA. Currently the amount of licensed users for Crowd is 60. Different 10 users can authenticate only to Crowd, then the licensed users of Crowd currently is only 70 since the other 80 is not configured to be able to authenticate against any application.

Hope it helps.

Cheers,  
Septa Cahyadiputra

comments: author: Shravanthi Sudarshana
body: Thanks Septa. Its pretty clear now. So for crowd we need license for set of users which is union of both Jira and confluence as well as crowd application users (if they are unique)? We will work on licensing of Crowd based on that.


author: Septa Cahyadiputra
body: Hi Shravanthi,

Indeed it is correct. Please refer to our license documentation for detailed information regarding this here:

[](https://confluence.atlassian.com/display/CROWD/Licensing)<https://confluence.atlassian.com/display/CROWD/Licensing>

Hope it helps.

Cheers,  
Septa Cahyadiputra


Tags: crowd-administration
Is it Necessary to install Crowd with Jira? LDAP test succeeds but User authentication fails. ??
Asked by Akbar ALi:

Dear Expert,

kindly tell me is it necessary to install Crowd with Jira.Actually the problem is i configued LDAP in Jira the TEST was completely Successfull but synchronization failed.All active directory Users i can see in jira but when i am trying to login its give me error Username and Password incorrect.

Kindly help me to solve this problem

Regards,

Akbar ALi


Answers:
author: Akbar ALi
body: Hi Giu,

Thank you so much for instant response actually we are using free Jira license for testing i thing thats why i am not able to login because limited users.

Regards,

Ali


author: Giuliano C.
body: Hey Akbar,

Bein honest, Crowd will give you better SSO experience and will be able to also manage the users. However, in this case we can see that you're using LDAP to authenticate, which should not be related to the Crowd usage. Only if you use Crowd too, so the authentication would pass through both applications.

Can you give us some more details on the log files from your JIRA instance (JIRA Home/logs folder), so we can see what could be happening?

PS: More information on JIRA with LDAP in this doc: <https://confluence.atlassian.com/display/JIRA/Connecting+to+an+LDAP+Directory>

Cheers,

Giu


Tags: active-directory

authentication

ldap
Issue Configuring Crowd 2.7.4 (IBM Java)
Asked by Eric C:

Environment:

**OS:** AIX 6.1 64-bit; **Java:** IBM J9 VM build 29, JRE 1.7.0; **Products:** Crowd 2.7.4, JIRA 6.2.1, Confluence 5.x

**Issue:** When trying to install Atlassian Crowd, I get stuck at the point where I am trying to configure the database connection. It does not matter if the install is brand new, or migrated install and home directories, the application does not start or install successfully. The message on the screen relates to certain plugins, crowd-rest for example, not being deployed. In looking at the atlassian-crowd.log, I see these following errors:

java.lang.RuntimeException: Detected an incompatible version of Apache Xerces on the classpath. If using Tomcat, you may have an old version of Xerces in $TOMCAT_HOME/common/lib/endorsed that will need to be removed.

Is it the case that IBM Java might not be supported by Atlassian? I was able to get JIRA and Confluence installed on the java version, but Crowd is a no-go.

Any ideas?


Answers:
author: Caspar Krieger
body: We (Crowd developers) don't test Crowd against the IBM JVM because we don't support it; we only support Sun/Oracle and OpenJDK JVMs. [This KB article](https://confluence.atlassian.com/x/dwGkEg) says as much.

I'm not sure if JIRA and Confluence test against the IBM JVM; I've never heard that they do, but that doesn't mean they don't. Personally I suspect you got lucky with JIRA and Confluence so far.

comments: author: Eric C
body: Caspar,

Thanks for the reply. Do you by chance know if Atlassian has a OpenJDk or Oracle JDK that is compatible with AIX, or where I could get it?


author: Caspar Krieger
body: (Atlassian isn't associated with OpenJDK or Oracle's JDK other than that we support our apps on them, so I take it you mean "can I get OpenJDK or Oracle's JDK to work on AIX?")

Anyway, I'm not sure. I googled and found an [OpenJDK port to AIX](http://openjdk.java.net/projects/ppc-aix-port/), but of course I don't have an AIX machine handy to test on. It might work, but I should point out that AIX isn't a [supported OS](https://confluence.atlassian.com/display/CROWD/Supported+Platforms/) for Crowd either, so you'll still be swimming upstream.


Tags: crowd-administration
Recover from being locked out of Crowd Admin?
Asked by Jerry Lin:

Hello,

I was cleaning up my Crowd configuration and removed all previous internal directories and was planning to just leave the LDAP directories which is where all the users reside. This immediately locked me out of having admin access, even though my account is part of the crowd-administrators group.

I'm guessing my duplicate username in the internal directory was what was giving me admin access. How do I recover admin access?


Answers:
author: Jerry Lin
body: Hello. After working with Atlassian support, I've gotten to a way to map the leftover LDAP account to Crowd Admin. Everything is now all good and working. Thanks guys!


author: Jerry Lin
body: I'm currently workign with support... who has just pointed me to the same "Restoring Passwords" article and told me they don't support SQL level procedures. :/.

Why allow users to remove their last internal directory if this is the result?


author: Jerry Lin
body: Hey Bruna. Thanks for the response!

I had found that earlier. The issue with using this guide is I haven't lost the password or just don't have an admin user. The entire internal directory is gone. The guide assumes I have either an admin that I just need to reset password to or just need to add an admin to the internal directory (which was dropped in my case).

comments: author: Caspar Krieger
body: You could do a separate fresh installation of Crowd to work out which database entries are required to give you access via the internal directory and then use that to recreate the internal directory in the db, but you're probably best off raising a support case with [](https://support.atlassian.com)<https://support.atlassian.com>so they can step you through recreating the internal directory in the database, creating a user, etc.


author: Bruna Griebeler
body: Hi Jerry,

Please take a look here so you can restore your admin rights: [Restoring Passwords To Recover Admin User Rights](https://confluence.atlassian.com/display/CROWDKB/Restoring+Passwords+To+Recover+Admin+User+Rights)
Manage Groups locally with users from different directories
Asked by Gustavo Mota:

We have a crowd aplication connected with 3 Ad's, and I can't write in this active directories. I want to create a local group for example "team1" and put direct member from diferente directories.

I set the flag to manage groups locally in all the 3 AD's but I can't create groups with the same name.(one in each directory)

I've tried to create a local group in crowd local directory, but I still can't insert members from different directories.

Is it possible to create a "team1 group"(local) and put users from differente sources?


Answers:
author: Rodrigo Girardi Adami
body: Hi Gustavo,

As far as I know, this is not possible currently. I could also find [another answer](/questions/106598/multiple-directories-in-crowd-can-we-create-user-in-1st-and-group-in-other-directory-and-assign-user-to-group) that states the same.

Cheers,

Rodrigo


Tags: crowd-administration
How to set up Crowd in AWS VPC (currently getting 'Unable to resolve this machine's hostname' error)?
Asked by Izumi Berat:

Hi,

My JIRA instance is hosted on a Linux AWS ec2 instance connected to a AWS RDS database in the VPC. I am trying to install Crowd on that same instance / database in the VPC.

I get this error when going through the installation wizard on the 'Default Administrator page'

![](http://content.screencast.com/users/Izumib/folders/Snagit/media/96033961-2c38-4d41-b255-c455ff3d554f/08.04.2014-14.52.41.png)

------

NEW:

Even though the IP address is different (I am just re-using a screenshot I took on another EC2 instance), the Private IP in the red rectangle is the IP it is refering to in the error message above:![](https://support.atlassian.com/servicedesk/customershim/secure/attachment/877318/877318_private+IP+address.png)

-----

Does anyone know how to get around this?

Thank you!

Izumi.


Answers:
author: Caspar Krieger
body: In addition to what Nic said, if ip-10-0-0-37 is meant to be your machine's hostname, check that your machine can correctly resolve it to 127.0.0.1 or as the ip which you intend it presents to the world.

comments: author: Izumi Berat
body: @Nic Broughand @Caspar Krieger- Thank you for helping out. I added a screenshot in the issue description. The IP address it is referring to is the Private IP address of the VPC the EC2 instance is part of. The Public IP address to access the instance is different. I guess that in the case of a VPC (Amazon Virtual Private Cloud), the initial IP address of the instance is the Private IP, on top of which get added the Public IP. If this is the case, this might be connected to a bug in crowd that doesn't allow to change IP addresses.


author: Nic Brough -Adaptavist-
body: That's not a valid IP address, or your computer is unable to find it in DNS. You've entered the string ip-10-0-0-37, did you mean to enter a proper address of 10.0.0.37, or do you really mean you've got a server called ip-10-0-0.37?


Tags: aws

crowd-administration

docker
I need to set Sub task assignee by jython script to a crowd user, like (user1)
Asked by CCP TechOps:

I tried below script for that, its able to create sub task but not getting assinged to a user

from com.atlassian.jira import ComponentManager  
from com.atlassian.jira.util import ImportUtils  
from com.atlassian.jira import ManagerFactory  
from com.atlassian.jira import ManagerFactory  
issueManager = ComponentManager.getInstance().getIssueManager()  
issueFactory = ComponentManager.getInstance().getIssueFactory()  
authenticationContext = ComponentManager.getInstance().getJiraAuthenticationContext()  
subTaskManager = ComponentManager.getInstance().getSubTaskManager()

issueObject3 = issueFactory.getIssue()  
issueObject3.setProject(issue.getProject())  
issueObject3.setIssueTypeId("7")  
issueObject3.setParentId(issue.getId())  
issueObject3.setPriority(issue.getPriority())  
issueObject3.setSummary("RDKSEC_Arrisxb3")  
issueObject3.setReporter(issue.getReporter())  
subTask3 = issueManager.createIssue(authenticationContext.getLoggedInUser(), issueObject3)  
subTaskManager.createSubTaskIssueLink(issue.getGenericValue(), subTask3, authenticationContext.getLoggedInUser())  
ImportUtils.setIndexIssues(True)  
ComponentManager.getInstance().getIndexManager().reIndex(subTask3)  
ImportUtils.setIndexIssues(False)

I tried adding a line like

issueObject3.setAssignee(issue.setAssignee(user1))

but its not working and throughing error saying not able to find user1

do i need to import some crowd user model or i need to tweek script? Please help.


Answers:
author: CCP TechOps
body: Thanks Alexey it works very well :-)


author: CCP TechOps
body: Thanks Alexey it works very well :-)


author: CCP TechOps
body: Thanks Alexey it works very well :-)


author: Alexey_Rjeutski__Polontech_
body: if you want to provide username only - try to set

[](https://docs.atlassian.com/jira/6.2.7/com/atlassian/jira/issue/MutableIssue.html#setAssigneeId(java.lang.String))[https://docs.atlassian.com/jira/6.2.7/com/atlassian/jira/issue/MutableIssue.html#setAssigneeId(java.lang.String](https://docs.atlassian.com/jira/6.2.7/com/atlassian/jira/issue/MutableIssue.html#setAssigneeId%28java.lang.String)) during creation of issue

issueObject3.setAssigneeId("user1"); (java-style, set syntax according to language)


Tags: jython
Unable to search users or groups in Crowd
Asked by Jenin Mohan:

I am experiencing an issue in Crowd where I am not able to search groups or users within Crowd. If I go to a users profile and click on "Add Groups", then the search windows open. When I click on search button it redirects me to the same page, without any results, same with users as well.  
Request you to please assist me in knowing whats causing this issue.  
Thanks and Regards,  
Jenin Mohan


Answers:
author: Septa Cahyadiputra
body: Hi Jenin,

Could you please let us know the version of your Crowd. Also, please try the following steps:

1. Shutdown Crowd
2. Delete the content of \<Crowd_Install_Dir\>/apache-tomcat/work/
3. Restart Crowd

Hope it helps.

Cheers,  
Septa Cahyadiputra

comments: author: Jenin Mohan
body: Version is 2.7.2


author: Jenin Mohan
body: Hi Septa,

I found that the search is working when I am trying the same operation in google chrome, its not working for me in IE9.

Now I am wondering what is wrong with IE9?

Thanks and Regards,

Jenin Mohan


author: Jenin Mohan
body: Yes..enabling compatibility mode worked for me.

Thanks Septa for your help!!

Warm Regards,

Jenin


author: Septa Cahyadiputra
body: It was my pleasure :)


author: Septa Cahyadiputra
body: Hi Jenin,

Please try to check if compatibility mode is enabled. Also, please try to use default setting by disabling any third party installled on your browser.

Hope it helps.

Cheers,  
Septa Cahyadiputra
SQL Error, Duplicate entry and HHH000315 in atlassian-crowd.log
Asked by Jan Wittorf:

In production we have the following triple log entries:

```
2014-08-05 00:26:38,514 ajp-bio-8009-exec-12 WARN [engine.jdbc.spi.SqlExceptionHelper] SQL Error: 1062, SQLState: 230002014-08-05 00:26:38,515 ajp-bio-8009-exec-12 ERROR [engine.jdbc.spi.SqlExceptionHelper] Duplicate entry 'F0Ed288GGEXEw8iDZrzMVQ00' for key 'uk_token_id_hash'2014-08-05 00:26:38,515 ajp-bio-8009-exec-12 ERROR [jdbc.batch.internal.BatchingBatch] HHH000315: Exception executing batch [could not perform addBatch]2014-08-05 00:46:28,325 ajp-bio-8009-exec-11 WARN [engine.jdbc.spi.SqlExceptionHelper] SQL Error: 1062, SQLState: 230002014-08-05 00:46:28,326 ajp-bio-8009-exec-11 ERROR [engine.jdbc.spi.SqlExceptionHelper] Duplicate entry 'F0Ed288GGEXEw8iDZrzMVQ00' for key 'uk_token_id_hash'2014-08-05 00:46:28,326 ajp-bio-8009-exec-11 ERROR [jdbc.batch.internal.BatchingBatch] HHH000315: Exception executing batch [could not perform addBatch]
```

As you can see, it occurs at different times. sometimes one time a day sometimes two or more times.

A look at the DB table cwd_token shows a valid token for one of our applications. Here is the row (name of application is replaced by xxxxxxxx):

```
id      directory_id entity_name random_number       identifier_hash          random_hash              created_date        last_accessed_date  last_accessed_time duration ------- ------------ ----------- ------------------- ------------------------ ------------------------ ------------------- ------------------- ------------------ -------- 1580324 -1           XXXXXXXXXXX 4671076784804601889 F0Ed288GGEXEw8iDZrzMVQ00 PAT0NGQA9ZjaUHkef0vuOA00 2014-08-05 08:11:43 2014-08-05 08:11:43 1407224594771      60
```

We are using latest Crowd-Version 2.7.2 Build 626.

We don't have any functional problems so far, but these log entries makes me wonder.


Answers:
author: Giacomo Iacovelli
body: same problem with our setting: all latest versions: jira, confluence and crowd. some user got kicked out i.e. when they try to assign an issue - others when they do other actions. not really easy to find the root cause. JIRA shows me an incredible amount of user sessions and tomcat is spitting error on error.


author: Mika Vuokko
body: Hi Jan, I just experienced the same error when setting domain attribute in Crowd setting from null to value '.srv' which is our internal DNS TLD for atlassian products. Do not know if it related to your problem tough.

comments: author: Jan Wittorf
body: Hi Mika,

if you mean the "SSO Domain" option in "General Options" of crowd adminstration: Yes, we have set this too. But we need to set it for cookie handling and security reasons.


author: Mika Vuokko
body: Yes, that is what I mean. When I clear that setting and rebooted crowd: SQL problems disappeared and Crowd acted normally. No SSO tough, but authentication works from Jira / Confluence once again.

fyi: I am trying to get the SSO working between jira/confluence (all latest versions), but no luck yet :)


author: Jan Wittorf
body: No ideas???


Tags: crowd-administration
Does crowd support SiteMinder ?
Asked by Vishnukumar Vasudevan:

Hi All

Has anyone tried connecting Crowd to SiteMinder ?

The integration I expact is like:

JIRA \<-\>Crowd\<-\>SiteMinder\<-\>LDAP ?

Have seen few docs saying JIRA/Confluence can be integrated to SiteMinder. But, would Crowd support this ?

Thanks, Vishnu.


Answers:
author: Felipe Kraemer
body: Hi Vishnu,

Crowd does not support SiteMinder, as can be seen here:

[](https://jira.atlassian.com/browse/CWD-529)<https://jira.atlassian.com/browse/CWD-529>

Kind regards,  
Felipe Kraemer  
Atlassian Support

comments: author: Vishnukumar Vasudevan
body: Yea, saw the feature request.

Thanks.


Tags: ldap

siteminder
Need support in changing the authentication from CROWD to LDAP
Asked by sathish reddy:

Hi Team ,

We are currently using jira 4.4.3 version with crowd(2.6.5) authentication , we need to change CROWD authentication to LDAP , Please help us .

Server ID :**A9G5-8KNB-XTN0-5KPP**

**SEN:**   
**SEN-L4232052**

Regards,

Sathish.


Answers:
author: LifeOfAFlippedTable
body: Hi Santhish,

If both your Crowd and LDAP has all the same user base, you can simply add an external directory, LDAP on Users Directories and then disable Crowd to test if any of the users are able to log in. If both Crowd and LDAP does not have the same user base, I'm afraid that you would need to manually add each users into the LDAP server and then only you add as a User Directory in JIRA.

Cheers,

Andrew Er


Tags: ldap
Importing Users from another Crowd Directory
Asked by Mircea Marin:

Hi,

I am trying to import the existing users from an old Crowd directory into a new one but I keep getting the following error: User Encryption Algorithms must match between directories

What I did is as follows:

1. In old Crowd (2.7.1) I added a new Generic Application (to allow the new Crowd Server to connect)
2. In the new Crowd (2.7.2) I added a new Remote Crowd directory (LEGACY Users)
3. In the new Crowd I can see all the users I need in the "Legacy Users" directory
4. In the new Crowd, went to users -\> Import Users -\> Directory Importer
5. Chose "Legacy Users" as source and the internal directory as Destination
6. Clicked Continue and I got the error from above.

Can anyone please tell me what I am doing wrong?

Thank you!


Answers:
author: Caspar Krieger
body: To expand on Tiago's answer, you won't be able to import from a remote crowd directory to an internal directory because there's no way to get the passwords from the Remote Crowd directory. Crowd uses the Crowd REST APIs to get the users from the remote Crowd dir ("legacy users" dir in your case), but the password is not available through the rest APIs. So that's why you get the error about encryption algorithms needing to match - the remote crowd directory doesn't have an encryption algorithm because the passwords are always left in the remote crowd instance.

comments: author: Mircea Marin
body: Thanks Caspar. I finally used a CSV export directly from the Database of the legacy system (as per the following link: <https://confluence.atlassian.com/pages/viewpage.action?pageId=442271568>) and then used the CSV import option and that worked out fine.


author: Tiago Comasseto
body: Hi Mircea, this is related to the [Password Encryption](https://confluence.atlassian.com/display/CROWD/Configuring+an+Internal+Directory) algorithms that is defined in the directories, both directories need to have the same algorithm, otherwise the import won't work.

You can check the algorithm of your directories with the following query:  

```
SELECT attribute_value FROM cwd_directory_attribute where attribute_name='user_encryption_method' and directory_id='XXXXXX';
```

I hope it helps.

Cheers


Tags: crowd-administration
Crowd SSO is not working on remote machine
Asked by Manjul Srivastava:

I have crowd and jenkins installed on a windows machine

For putting into a domain, i created virtual host on apache.

Now my jenkins is accessible using url [](http://manjuls.com/jenkins)<http://manjuls.com/jenkins>and crowd using [](http://manjuls.com/crowd)<http://manjuls.com/crowd>.

I set SSO domain as **[manjuls.com](http://manjuls.com)** in crowd administration part.

Now SSO is working smoothly on same machine on which crowd and jenkins are installed.

But, **SSO is not working on any remote desktop**. (for accessing crowd and jenkins using above urls i have done entry in host file of windows on both machines-local and remote desktop)

Please guide me.


Answers:
author: Manjul Srivastava
body: Hi Tiago, thanks for your response and suggestion.

I tracked log file and i found that i didn't provide trusted proxy server.

After giving trusted proxy server in crowd my crowd SSO is working fine on remote machines also.


author: Tiago Comasseto
body: Hi Manjul, you can check the logs with debug enabled to get more information about this issue:

1. ` Under Admin -> Logging & Profiling in Crowd, change the com.atlassian.crowd ``package` `to DEBUG.`
2. `Replicate the problem you are having (Logoff from all the apps; Login to your third-party and then ``try` `to access Crowd; Logoff again from all the apps; Login to Crowd and then ``try` `to access your third-party app).`
3. `Check the results into `[atlassian-crowd.log](http://confluence.atlassian.com/x/bAL3CQ)` file.`

I hope this helps

Cheers