youngmon/atlassian-qna huggingface dataset:
Cannot login to Crowd after restore database from an earlier version
Asked by Ingridli:

I am trying to upgrade Crowd server. I followed the instruction and installed the new version of Crowd on our test server and imported the database from the earlier version of Crowd. But after that I cannot login to crowd. The earlier version is 2.0.4. The new version is 2.5.3. Need help. Thanks.


Answers:
author: Ingridli
body: Thanks for support from Atlassian. This isse was resolved. Since SSL has been not configured yet, just modify the file \<crowd-home\>/crowd.properties to change the port from 8443 to 8095, and change https to http.


author: LuizA
body: Hello There,

In a first moment I would suggest you to take a look at the table 'cwd_user' in your Crowd's database and see if you have an Admin user there (try to recognize your admin in the table, you can check the field 'username') and then you find it, try to replace the admin password by the following procedure:

\* Please, perform a backup of your database before running any query

<https://confluence.atlassian.com/display/CONF43/Restoring+Passwords+To+Recover+Admin+User+Rights#RestoringPasswordsToRecoverAdminUserRights-Step2.ReplaceAdministratorPassword>

After you run this query to change the password, try to login again with the new password. If doesn't work I would suggest you to raise a support ticket at our [support.atlassian.com](http://support.atlassian.com) and attach your 'atlassian-confluence.log' for a review.

I hope this helps.

Best Regards,

LJ.

comments: author: Ingridli
body: Thanks for your reply. I actually already followed that link to restore password and even tried to create a new user in crowd-administrator group. But that did not work. In the database, which is MySQL, I can see those accounts are in there. But when I tried to login to crowd,I got "invalid login".
Crowd as LDAP Server
Asked by Brian Lancaster:

I have an application that is able to use internal and external authentication (LDAP). This product is Splunk.

I want to know if I can use Crowd to act as the LDAP server. As I currently have Crowd configured with groups that make since for our development needs I would like to use it with Splunk too.

Please let me know how to accomplish this, even if I need to use something like Apache to make the connection to crowd.


Answers:
author: LucasA
body: Yes and no,

Crowd was not designed to act as a general purpose LDAP server, but there are some applications or plugins that can turn Crowd into a functional LDAP server. Please take a look into <https://marketplace.atlassian.com/plugins/net.wimpi.crowd.ldap.crowd-ldap-server>.

Cheers,

Lucas Lima


author: Arun_Thundyill_Saseendran
body: Hi Lima

The link you have given is broken. Could you please check into it.

Cheers!

Arun


Tags: authentication

ldap

splunk
Tried to turn on SSO, now the Crowd app's login page infinitely redirects!
Asked by Andrew Pennebaker:

I tried to follow the Atlassian tutorials for enabling SSO, and now I can't login to the Crowd application. When I enter my login name and password, it redirects back to the same login page.


Answers:
author: Addam Webber
body: I have, it was a problem with the URL-intercepts in my security.xml file since I am using springsecurity. I needed to make sure I did not have my login page in the intercept area and I needed to make sure my catch-all did not catch my login page either.


author: Daniel Wong
body: We had this error when we first implemented SSO across the Atlassian suite. As I recall it was a proxy problem. Are you running your Crowd installation behind a reverse proxy? Check the settings in crowd.properties and your http conf


author: Sebastian Fyda
body: I have exacly the same issue, no additional info in any logs, none of apps are working.


author: Ryan Dunn
body: Hi Andrew,

Ever solve this one?

Ryan


author: Andrew Pennebaker
body: Crowd infinitely redirects logins, and JIRA refuses to accept HTTP requests. Bamboo and Confluence allow login, but they do not exhibit SSO.


author: MatthewC
body: can you login to the connected applications? Is it just Crowd you can't get into?


author: Robert Chang
body: Hi Andrew,

Odd as it sounds, I've seen this behavior occur due to old cookies on the browser. Could you see if using another browser or clearing the browser cache has any effect on this?

If not, do you see any errors in the Crowd logs (\<crowd_home\>/logs/atlassian-crowd.log)? What your SSO domain set to, and what URL are you accessing Crowd with?

-Rob

comments: author: Andrew Pennebaker
body: I cleared all cookies related to the Atlassian apps. No change. SSO domain is set to ".localhost", as I'm testing the apps on my computer. My boss tried turning SSO on for our live apps with the same result, so the problem shouldn't be limited to the use of localhost.


Tags: redirect

sso
use crowd attributes within Confluence and Jira
Asked by Peter Ebbelink:

Hi,

I already noticed that I can create additional attributes and values.

I created a attribute skype with value my.skype.account

Is it possible to reference this attribute within Confluence and Jira?

Thanx in advance.

<br />


Answers:
author: Robert Chang
body: Hi Peter,

I'm afraid that's not possible at this time. The Crowd custom user attributes cannot be synced to JIRA/Confluence.

Here are the feature requests relevant to what you're describing:

* <https://jira.atlassian.com/browse/CWD-2417>
* <https://jira.atlassian.com/browse/CONF-5286>

The second one is a little more broad request for Confluence to be able to set custom user attributes in profiles. However both of these features would be directly relevant to what you're hoping to do. Please vote/watch/comment as desired on the tickets.

Regards,

Robert

comments: author: Peter Ebbelink
body: Thanx Robert,

I'll vote them.


Tags: attribute

confluence

integration

jira

reference
Import Microsoft Active directory DL users in CROWD Group.
Asked by Tarun Sapra:

Hello,

There is a requirement which I am not sure how to proceed with,

We use crowd with microsoft active directory for delegated authentication and group and users are managed by crowd. A request has come in wherein user wants all the users in a specific DL (mailing list) of active directory to be part of a certain project. How to achieve this, I was thinkin' to import all those users into a single group and give that group releavnt project permissions. But HOW to import a DL into a crowd group??

Thanks,


Answers:
author: Zul NS _Atlassian_
body: If only the Distribution List is some sort of groups in AD, would just import the group instead.. aren't really familiar with AD and DL.
Jira not authenticating Crowd Users
Asked by John Reeher:

I have configured jira to integrate with crowd. The test function on the user directory setup in jira is working fine. Jira can see all the users and groups. I am using slightly modified crowd groups aka ip_jira_administrators and ip_jira_users because I have to keep this environment separate from my production atlassian suite install (this is being installed in a lab to test integration with various plug-ins). I have assigned these custom groups to my roles in Jira. However, whenever a crowd user attempts to login, it fails and I get the error message You do not have a permission to log in. If you think this is incorrect, please contact your JIRA administrators. The error log shows the entries:

2013-02-05 09:27:55,584 http-bio-8181-exec-1 anonymous 567x152x1 p77ocp 204.27.207.27,204.27.207.236 /rest/gadget/1.0/login The user 'xxx' is NOT AUTHORIZED to perform to login for this request

2013-02-05 09:27:55,584 http-bio-8181-exec-1 anonymous 567x152x1 p77ocp 204.27.207.27,204.27.207.236 /rest/gadget/1.0/login login : 'xxx' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

2013-02-05 09:27:55,600 http-bio-8181-exec-1 anonymous 567x152x1 p77ocp 204.27.207.27,204.27.207.236 /rest/gadget/1.0/login The user 'xxx' is NOT AUTHORIZED to perform this request

<br />


Answers:
author: Nic Brough -Adaptavist-
body: That looks like you have not put your new groups into the "can log in" permission in Admin -\> Global permissions

Can you check that first?

comments: author: John Reeher
body: Nic,

Dead on! I had assigned the groups to global roles, but not global permissions (I somehow thought they were connected). I added my custom groups to the global permissions and it's working fine.

Thanks!


author: MatthewC
body: Have you done an authentication check in Crowd for the application to make sure the user can auth against the app? What do the Crowd logs say? Have you also checked your allowable IP numbers in Crowd?
List of OSGi bundles in Crowd
Asked by Greg Gigon:

Hi Guys

As Crowd doesn't have a PUM console what would be the way to know the list of OSGi bundles I could use while developing a plugin?

Crowd version 2.5.3.

Cheers, Greg


Answers:
author: joe
body: Crowd includes the [Felix Web Console](http://felix.apache.org/site/apache-felix-web-console.html), at <http://localhost:8095/crowd/plugins/servlet/system/console/> , which makes much of the same information available as the UPM.

comments: author: Graham Bakay
body: How does one activate/enable this? I can't seem to find it.


author: Greg Gigon
body: Hey GrahamDownloaded standalone product doesn't have this feature enabled by default. I don't know how to enable it as well. However I found while developing plugin with Atlassian SDK, that the console is enabled. This means that you'll need to start it with atlas-run command. Good luck :)


author: Graham Bakay
body: Thanks, Greg. I'll fire up the SDK instance of Crowd instead.


Tags: app

osgi
How many users we have on our Crowd ?
Asked by Krisse:

Hi all,

I'm new to Atlassian, and I think you are going to hear more of me in the future.. but let's start with this one: Is there a way (I bet there is) to check the total amount of active (and nonactive) users we have on our Crowd ?

Thanks!

-- Kristian

P.S. What are those optional **bounty's** ? Are you supposed to collect them or spread them? What is the normal reward? 1,2,3 ...? o_0


Answers:
author: Zul NS _Atlassian_
body: If you had untick the 'Active' box in the user profile in CROWD, you can list the active users with the following SQL query
> select \* from cwd_user where active='T';

If you're checking users that are counted towards the license in JIRA, then you might be interested in [this documentation.](https://confluence.atlassian.com/display/JIRAKB/How+to+Get+a+List+of+Active+Users+Counting+Towards+the+JIRA+License)

Bounty points is the extra points given to the person who you have accepted the first answer. :) More info on karma points here.


author: darylchuah
body: You can check the total amount of user:

Go to Administration -\> Licencing -\> Recalculate your user total

comments: author: Krisse
body: Thanks Daryl!

Does it show active users or all users (inactive also) ?

-- Kristian


Tags: user

user-management
Can Crowd to use OpenID (Google/Yahoo!) as directory for authentication?
Asked by Dixon Hu:

Can Crowd use OpenID (Google/Yahoo!) as directory for authentication? Just like Jenkins can do this.

I tried Google Apps Directory for Crowd, but it seems I have to add users in Google Apps Domain. Basically I have to manage all users. I cannot use any Gmail account for this purpose.

Please kindly clarify.


Answers:
author: Harry Chan
body: Hi, Crowd (the download version) can make Crowd users auth to Google App applications, but cannot use it as a directory[.](https://www.cloudshards.com/confluencehosting.php)

So, no it can't do what you want to do[.](https://www.cloudshards.com/jirahosting.php)

Atlassian OnDemand can use Google Apps as a user directory though[.](https://www.cloudshards.com)


Tags: openid
Is it possible to brand/skin the Crowd pages?
Asked by Philip Colmer:

As per the question, really. I'd like to see if I can get the pages that the end-user interacts with to look as if they are part of our corporate styling.

If that is possible, how do I go about doing it, please?

Thanks.

Philip


Answers:
author: C. Faysal
body: i never tried but lookin at the page source ... content is loaded from crowd-webapp/console/

also stylesheets are located here...

ls -1 crowd-webapp/console/style/  
forms.css  
idx-legacy.css  
ie6.css  
ie7.css  
main.css


author: NielsJ
body: Hi Philip,

unfortunately I am not aware of a "good" possibility to do so right now.

But ... my company has a product called CUTE\[1\] that allows theming Confluence and JIRA at the moment. Would you like to use it for Crowd as well?

Regards,  
Niels

1: <https://marketplace.atlassian.com/plugins/de.communardo.atlassian.plugins.cute>
Sync Active Directlory "Managers" or "Direct Reports" to CROWD
Asked by Ben Shamsian:

Is there a way to setup CROWD to pull Active Directlry user attributes "Manager" or "Direct Reports".

Basically I want to use CROWD REst API to get list of all users and who they report to. Our Crowd Server is synced with Microsoft Active Directory and is already pulling the Users. But I dont see any of the attributes associated with the user in Active Directory such as their manager.


Answers:
author: Daniel Borcherding
body: Hello,

It looks like this functionality is a standing feature request in Crowd.

<https://jira.atlassian.com/browse/CWD-1287>

Please vote for this issue as well as the issue below to ensure that these features are rolled into a future release of Crowd.

<https://jira.atlassian.com/browse/CWD-583>

I am attaching your post to both of these issues to increase these issues visibility to our developers.


Tags: active-directory
Is AtlassianID the new Atlassian Crowd?
Asked by childnode:

Dear Atlassian

What is the system behind [id.atlassian.com](http://id.atlassian.com/) ?

Do you use a new crowd version, or a self made frontend for your LDAP and then using crowd in background or totally self-made / customized SSO system!?


Answers:
author: JohnA
body: Hi there,

AtlassianID is based on a Crowd SSO solution, but it also has a significant number of customisations from the standard Crowd SSO solution so that it can merge different accounts from different Atlassian systems. However, it is just a customised implementation of Crowd rather than a new application but there may well be some benefits for Crowd that may trickle down from the implementation of AtlassianID. At the moment it is a very new system but I'm sure the team who implemented it will release a public blog detailing the architecture and implementation in the near future

All the best,  
John

comments: author: Caspar Krieger
body: Here's that blog post, for anyone interested: [](https://blogs.atlassian.com/2013/05/a-solution-to-sso-authentication-and-identity-management-lessons-learned/)<https://blogs.atlassian.com/2013/05/a-solution-to-sso-authentication-and-identity-management-lessons-learned/>


author: William Zanchet [Atlassian]
body: Hello there,  

Just adding in what John said:  

Atlassian ID replaces all the logins to all of these various systems -- and it will be applied to even more services soon. For current and long-time customers, Atlassian ID provides an easy way to link all of your Atlassian accounts together.  

We have a blogpost about it, as you can see here: [http://blogs.atlassian.com/2013/01/atlassian-id-coming-to-a-service-near-you/](http://blogs.atlassian.com/2013/01/atlassian-id-coming-to-a-service-near-you/ "Atlassian ID: Coming to a Service Near You ")  

<br />

Cheers,  

WZ
unable to login to crowd interface
Asked by Jason Horn:

we are currently getting an error trying to login to crowd console. error is The SSO domain setting for Crowd Console is invalid. Please go here for instructions on resetting the SSO domain value. the linked page (<https://confluence.atlassian.com/display/CROWD024/Resetting+the+Domain+Cookie+Value>) suggests we should empty out the cwd_property.property_value for the domain property_name. That sounds a little scary to me, would like to have more guidance on this so that we can login to Crowd console again.


Answers:
author: Tiago Comasseto
body: Hi Jason,

I understand your concern, this message appears when you are accessing Crowd through a different URL than the URL configured for your SSO domain.

Alternatively to the instruction at the KB, you could execute the following query and identify what is the URL currently set as SSO domain, than you'd just need to access Crowd through that URL.

```
select * from cwd_property where property_name = 'domain';
```

Also, just to let you know, in case you happen to need to reset the SSO domain, I've followed the KB procedure more than once and it's pretty safe. You just need to be sure to have a database backup in case of any non planed issue during the database modification (such as an outage) and restart your Crowd instance after it's done.

Cheers
Crowd user is synchronized to JIRA/Confluence/Stash though the group is different.
Asked by Miyako Sugimoto:

After setting the user on Crowd, we synchronized the user.

Though the user belongs to only the Bamboo group, the user is synchronized to JIRA, Confluence and Stash.

steps:

1) add the user on Crowd

2) set the Bamboo group to the user on 'Groups' tab

3) synchronize the user to each product(JIRA/Confluence/Stash/Bamboo)

The user is synchronized to Bamboo, it's no problem.

However, the user also is synchronized to JIRA, Confluence and Stash.

We can not login to JIRA, Confluence and Stash using the user account, however we are confused about the many and unnecessary users on each products.

How should we do to synchronize the user to only the appropriate products?


Answers:
author: Miyako Sugimoto
body: This phenomenon occurs even if we have one User Directory in Crowd.

As you recommend, we want to have one User Directory in Crowd.

However, all users of directory are syschronised to each application regardless of the group.

It's the problem of this post.

We found out that it is a known limitation of Crowd.

<https://jira.atlassian.com/browse/CWD-1348>

We hope this will be fixed.


author: Matt
body: You may set multiple User Directories in Crowd:

* Jira User Directory
* Bamboo User Directory
* Stash User directory

and synchronize selected products to designated User Direcories in Crowd:

* your Jira product -\> Jira User Directory in Crowd

then add users to directory and it's done. **But I strongly discourage this approach**. You'll end-up with a lot of duplicated users.

IMHO The best solution is to have one User Directory in Crowd. All products connected to this UD. Add user and assign him/her to group for example bamboo-users.

Then configure your product to allow users belonging to certain groups.
Disable crowd integration since I'm locked out
Asked by Jesper Jensen:

I have a test instance that is a replica of the real that has crowd/jira integration.

Since the test servers can't see the real once I can't login to Crucible since the crowd fails.

How do I get out of this?

Log:

2013-01-16 14:08:37,646 WARN main fisheye.app DefaultUserManager$3-read - Unable to remove any deleted admin groups: Problem communicating with Crowd


Answers:
author: Grzegorz Dlugoszewski
body: Hey.

You should reset your admin password (as described here: <https://confluence.atlassian.com/display/FISHEYE/How+to+reset+the+Administration+Page+password+in+Fisheye+or+Crucible>) and after you've logged in using that resetted password you'll be able to change authentication settings and/or disable Crowd in your Crucible.

Don't forget to change the admin password again after you're done fixing.

Cheers!


Tags: fisheye-crucible
How to preview markdown text?
Asked by Erin:

We are revamping several of our JSM portals, and I am editing the text for the portals and for the Help Center. Both of these use markdown.

I used to simply use another project that had a markdown previewer (see below) then copy/paste it for quick use. However, I can't find any previewer anywhere. Was it removed? And if so, why?

It was useful and saved a lot of time. :(

![markdown.PNG](/t5/image/serverpage/image-id/336730i48681F2F03D4961F/image-size/large?v=v2&px=999 "markdown.PNG")


Answers:
author: gail207martinez
body: Hello!

If the markdown previewer you used is no longer available, consider using alternatives like online editors (Dillinger or StackEdit), plugins for code editors (Markdown Preview Enhanced for Visual Studio Code or Markdown Preview for Atom), or desktop apps (Typora or MarkdownPad). These tools can help you efficiently preview and edit your markdown content for your JSM portals and Help Center.

Best Regards,

[panorama charter com](https://www-panoramacharter.com)


Tags: cloud

jira-service-management

jira-service-management-cloud
Filtering by related asset objects
Asked by Sebastian Spitzer:

How do I filter in Jira Service Management for processes for applications that are managed by certain attributes/objects?

In our assets, **application** are maintained that have "**service units / key users**" (people who can support the application). These applications have a "supported by" relationship with the person(s).

![object - 'application'.png](https://community.atlassian.com/t5/image/serverpage/image-id/336721i8F1DFA20431A028C/image-size/large?v=v2&px=999 "object - 'application'.png")

![object - 'application' - attributes.png](https://community.atlassian.com/t5/image/serverpage/image-id/336722iEB24EC2811E4BB6B/image-size/large?v=v2&px=999 "object - 'application' - attributes.png")

This is exactly what I need to be able to filter for in JSM.

**My goal is to create a list of issues in JSM that shows the current user the processes for applications that they manage. I can filter by applications, but not by applications with "service units / key users" = currently logged in user.**

What do I need to do for this?

I'm also happy to provide workaround suggestions if something in the JSM standard doesn't work with assets.

Thaanks a lot, Sebastian


Answers:
author: Adolfo Casari
body: [@Sebastian Spitzer](/t5/user/viewprofilepage/user-id/2135003)Take a look at this:

<https://support.atlassian.com/jira-service-management-cloud/docs/assets-jql-functions/>

comments: author: Sebastian Spitzer
body: Hello [@Adolfo Casari](/t5/user/viewprofilepage/user-id/853257) ,

Thanks for the tip!

I'll have to read it when I get a chance. There are a few more related information pages. It's a somewhat more complex topic.

* [Use Jira and Assets Query Languages (AQL) with Assets](https://support.atlassian.com/jira-service-management-cloud/docs/use-jira-and-assets-query-languages-with-assets/)
  * [Assets JQL Functions](https://support.atlassian.com/jira-service-management-cloud/docs/assets-jql-functions/)
  * [How to use Assets Query Language (AQL)](https://support.atlassian.com/jira-service-management-cloud/docs/how-to-use-assets-query-language-aql/)
  * [Use placeholders to replace information depending on context](https://support.atlassian.com/jira-service-management-cloud/docs/use-placeholders-to-replace-information-depending-on-context/)
  * [Using Assets Query Language (AQL) syntax](https://support.atlassian.com/jira-service-management-cloud/docs/use-assets-query-language-aql/)

I have to check whether I can dive into it. If not, or if I have a more detailed question, I'll get back to you.

Thanks again!

Best wishes,  
Sebastian


Tags: assets

cloud

filter

jira-service-management

jira-service-management-cloud