youngmon/atlassian-qna huggingface dataset:
How to change password per directory in Crowd?
Asked by Hanna Kutkowska:

We have two internal Crowd directories and users cannot change their password in the second directory. Is there any chance to change the password by a user in more than one directories?


Answers:
author: Caspar Krieger
body: No, sorry. Crowd operates by authenticating the user via the first directory in which they exist; if they exist in two directories, they won't ever be authenticated via the second directory, and so theoretically\* the functionality to reset their password in the second directory won't ever be used.

Worrying about multiple passwords per account would also be confusing to users (even more so than say Google's application specific passwords which are surfaced with 2 factor auth).

\* I said theoretically earlier because you're probably asking about this out of more than plain curiosity. You could implement a standalone "password reset" application (using [Crowd's REST APIs](https://developer.atlassian.com/display/CROWDDEV/Crowd+REST+APIs) which authenticate as a newly configured application in Crowd which only has that second directory mapped) if you really wanted to go down this path.
Crowd password reset emails have wrong base url
Asked by Yang Zhang:

Even after following <https://confluence.atlassian.com/display/CROWDKB/Change+password+email+have+wrong+base+url>, changing /var/crowd-home/crowd.properties, and restarting the server, it still is sending emails anchored at <http://localhost:8095> rather than the desired <https://foo.bar.com:8096>.

More details:

* If I change application.login.url, then nothing seems to change (emails still say localhost:8095).
* If I change crowd.server.url, then I can no longer log into the Crowd admin console (and hence I can't trigger any password reset emails...not to mention I can't log into the Crowd admin console!).

FWIW Crowd is running on port 8095 behind an nginx server listening on 8096 with TLS.


Answers:
author: Rodrigo Girardi Adami
body: Hi Yang,

It seems that you have opened a bug report for this issue here: <https://jira.atlassian.com/browse/CWD-4207>

We have updated the documentation and it's now correct, so you'll need to add a "crowd.base.url" property in the Crowd_home\\crowd.properties file to get the correct URL in emails.

I'll proceed in closing this question as answered.

Cheers,

Rodrigo


Tags: crowd-administration
SSLProtocolException using crowd as user-directory in stash
Asked by Frank Kubis:

We running Confluence, JIRA, Stash and Crowd behind apache as proxy.

I tried to add crowd to stash as user-directory, but getting the exception:

[javax.net](http://javax.net).ssl.SSLProtocolException: handshake alert: unrecognized_name

Bildschirmfoto vom 2015-01-08 17:52:35.png

For JIRA and Confluence our configuration works. Is there some special to do for Stash?  
[](https://community.atlassian.com/t5/Crowd-questions/SSLProtocolException-using-crowd-as-user-directory-in-stash/qaq-p/140396?attachment-id=5664){#link_115a39539bce98}  
[](/tnckb94959/attachments/tnckb94959/crowd-questions/621/1/Bildschirmfoto%20vom%202015-01-08%2017%3A52%3A35.png){#display_115a39539bce98_0}


Answers:
author: Matheus Fernandes
body: I have found two articles mentioning that setting the "`-Djsse.enableSNIExtension=``false`" flag could possibly fix this:

* <https://answers.atlassian.com/questions/208284>
* <https://code.google.com/p/zaproxy/issues/detail?id=1225>

From the first link:
> Java 7 introduced SNI support which is enabled by default. I have found out that certain misconfigured servers send an "Unrecognized Name" warning in the SSL handshake which is ignored by most clients... except for Java.

It's not something with Stash itself, but possibly a misconfiguration of its server. :smile:

comments: author: Frank Kubis
body: Thanks, -Djsse.enableSNIExtension=false did it for me.


Tags: bitbucket-administration

bitbucket-server

crowd-administration

user-directory
Crowd import User from JIRA PreparedStatementCallback; bad SQL grammar
Asked by Frank Kubis:

Trying to import user from exsisting usign the importer getting this exception:

```
org.springframework.jdbc.BadSqlGrammarException: PreparedStatementCallback; bad SQL grammar [SELECT usr.user_name AS user_name, grp.group_name AS group_name FROM cwd_membership mem INNER JOIN cwd_group grp ON mem.parent_id = grp.id INNER JOIN cwd_user usr ON mem.child_id = usr.ID WHERE membership_type = 'GROUP_USER' AND usr.directory_id = ?]; nested exception is com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: Unknown column 'membership_type' in 'where clause'
```

<br />

Crowd 2.8.0 (Build:#645 - 2014-11-05)  
JIRA v6.3.9#6339-sha1:46fa261  
MySQL 14.14 Distrib 5.5.40  
Debian 7.7

I guess its a bug, couse it a bad sql gramma. But I was recommended to write here first  
[](https://community.atlassian.com/t5/Crowd-questions/Crowd-import-User-from-JIRA-PreparedStatementCallback-bad-SQL/qaq-p/287643?attachment-id=8205){#link_115a395b88ea84}  
[](/tnckb94959/attachments/tnckb94959/crowd-questions/1274/1/stacktrace.html){#display_115a395b88ea84_0}


Answers:
author: Rodrigo Girardi Adami
body: Hi Frank,

I wasn't able to find any bug report for the error you have stated. Would be possible to describe the exact steps that you performed so we can try to replicate here locally and open a bug report?

Cheers,

Rodrigo

comments: author: Frank Kubis
body: Hi Rodrigo,I dont know why and how. But after restart both it works.Thanks :)


Tags: crowd-administration
Crowd Migration "database contains existing data."
Asked by david martin:

I am trying to stand up a new crowd server. I am going thru the setup and I selected restore from xml backup and trying to use an existing postgres database. I keep getting the error that stats " Database contains existing data". I read the migrating data doc but I am unsure how to still get past this step since my crowd.cfg.xml file is still stuck on \<setupStep\>setupdatabase\</setupStep\>. Thank you in advance.


Answers:
author: Rodrigo Girardi Adami
body: Hi David,

You should take care in this step since the database contains data and thus is throwing this message to you. If you want to setup a new Crowd server, I suggest to select another database schema when starting crowd the first time. You can select the database schema in the connection string of Crowd and point it to another Postgres Schema to not overwrite the current one.

Cheers,

Rodrigo
Batch modifying user info in crowd
Asked by Kiho Lee:

Hi.

we have near 500 users in our crowd,

and there are frequently user info updates.

It is too hard job to do at once and need much time.

So, we find out the best way for our problem.

Does crowd have any solution when administrator do Batch modifying user info?


Answers:
author: Caspar Krieger
body: You can use the [Crowd REST APIs](https://developer.atlassian.com/display/CROWDDEV/Crowd+REST+APIs) together with your scripting language of choice, but there isn't a bulk edit administration interface or a built-in script runner in Crowd.


Tags: crowd-administration
Listing users with last login time in Crowd
Asked by Gerald Schneider:

I'm trying to find user accounts that haven't been used in a long time. I found [this KB article](https://confluence.atlassian.com/display/CROWDKB/List+the+Last+Login+Date+for+all+Users+in+Crowd), which cointains an SQL query to list users with last login time in Crowd, I have just one problem with it: The numbers are odd.

According to Crowd we currently have 451 users (they come from an Active Directory and an OpenLDAP server).

Running the query as it is given in the KB article returns 49 users with a last login timestamp.

Running a simpler query to list all users (*SELECT user_name FROM cwd_user*) returns 125 users.

How can I interpret these numbers? Are 451 the users that could possibly log in because they are in an allowed group, but only 49 users actually have logged in?

The returned users are from both directory sources.

The Crowd instance is used by JIRA, Confluence, FishEye and Apache basic auth.


Answers:
author: Caspar Krieger
body: Are any of your LDAP connector directories uncached? Crowd won't record information like last login time for uncached directories, because only cached users show up in cwd_user. That might explain why you have a lower-than-expected amount of users appearing with `select user_name from cwd_user` - but it sure doesn't explain why you'd see users from both directories showing up in that case (I assume you've verified they are from different directories by comparing the directory_id on the cwd_user rows), unless you have more directories defined.

(I've assumed your directories are LDAP connector directories, rather than delegated authentication directories.)

Where are you seeing the 451 number?

Just in case there's any confusion about the 49 \<-\> 125 discrepency, the query given in the KB article won't show users who have never authenticated. You can view those users with a query like the following:

```
select cwd_user.directory_id, cwd_user.user_name from cwd_user where not exists (select id from cwd_user_attribute where cwd_user_attribute.user_id = cwd_user.id and cwd_user_attribute.attribute_name = 'lastAuthenticated');
```

comments: author: Gerald Schneider
body: Thanks, this really helps. The directories are not cached, so that explains it. The query with uses which haven't authenticated helps too, the result is 76 users which is the exact difference between 125 and 49.The number 451 is shown in the license information.


Tags: crowd-administration
Bulk modify users in Crowd
Asked by Jeanne Howe:

I have a large number of users that need to be removed from the jira-users group. We use Crowd for user management, so I can not use the CLI to remove the users. Is there a way to remove users from a group within Crowd in "bulk"


Answers:
author: Caspar Krieger
body: There's no real bulk edit interface in Crowd, but you could script this using the [Crowd REST APIs](https://developer.atlassian.com/display/CROWDDEV/Crowd+REST+APIs).


Tags: crowd-administration
Disabling the feature to let anyone make an internal comment
Asked by Christian Zorn:

Hello Everyone!

I'm working on modifying our Jira Service Management project and I've hit a bit of a snag. I want to make sure that reporters (our customers) can reply to comments on their tickets directly through Jira (not just through the customer portal), but I don't want them to be able to add internal notes. Right now, they can only add internal notes, which isn't what we want. Can someone guide me on how to configure the permissions so that reporters can only add public comments and reply to comments, but can't add internal notes? I think I might need to adjust some roles or permissions, but I'm not exactly sure how to do it. Any help would be greatly appreciated! Thanks in advance!  
![d5c3cf04-0888-495e-b187-6cd7db07c4e0.png](/t5/image/serverpage/image-id/339560iD5DA34A6EFE457FE/image-size/large?v=v2&px=999 "d5c3cf04-0888-495e-b187-6cd7db07c4e0.png")


Answers:
author: Christian Zorn
body: So this was to make it so internal comments weren't visible to customers who submitted to a service management project. This has been accomplished. Typically people submitting tickets will need to use the service portal. But we had it set up so 'reporters' could browse the project, but used issue security on each ticket so reporters could only view the tickets they submitted. Then we ran a script so the internal comments made were also hidden to people working on the project via a role. Hopefully that makes sense. The catch is only people can make internal comments when commenting on the ticket from the project, but the functionality is still the same as a comment.


author: Adolfo Casari
body: [@Christian Zorn](/t5/user/viewprofilepage/user-id/5509649)They need an Agent license to add public comments. Howerver it's hard to understand your requeriment. Customers should use the portal for commenting, not Jira.


Tags: cloud

jira-service-management

jira-service-management-cloud
LinkedIssue smart value
Asked by Gene Pengson:

Hi All

I created an automation to close Master tickets that has a linked issue status = close or completed.

I also have an automation that will comment out if the Linked issue is still in Open, Pending or Work in progress status

Is there a smart value that i can include to my comment to show only Linked issue in Open, Pending and Work In Progress status?

thanks a Lot


Answers:
author: Dexter de Vera
body: Hi [@Gene Pengson](/t5/user/viewprofilepage/user-id/5553586) ,

Welcome to the Atlassian community,

Can you show us the automation you have?

You can add an action - "Lookup issues" to query all linked issues with the status you prefer

ei.

*linkedIssue IN linkedIssues("{{issue}}") AND status in (Open, Pending, "Work In Progress")*

Then add this to your comment

*{{#lookupIssues}}*   
*{{key}}*   
*{{/}}*

*![image.png](https://community.atlassian.com/t5/image/serverpage/image-id/339525iACE3CD72AAD37C78/image-size/large?v=v2&px=999 "image.png")*

Hope it helps!

Thank you.

comments: author: Gene Pengson
body: its working now with the above solution

thank you very much


Tags: cloud

jira-service-management

jira-service-management-cloud
Help writing a "linked assets" query that will match multiple assets
Asked by Brian Johnson:

Hi there,

I'm new to Jira so please be gentle :-)

In my asset inventory I have many systems that have "NUC" in the name - like NUC01, NUC02, NUC03, etc. I'm trying to create an automated rule that will generate a Jira ticket every month and automatically link to ALL of these NUCs.

If I do something like "Name LIKE "NUC05," the ticket is generated and linked to asset NUC05. Wonderful!

However, I can't figure out how to make the ticket link to ALL the NUC boxes. I've tried:

\* Name LIKE "NUC"

\* Name LIKE "NUC\*"  
\* Name \~ "NUC\*"  

....and every other tip I can find on other blogs/forums, but they don't work! I'll either get a ticket with no assets, or a ticket with just one asset, like NUC01.

It doesn't help that the "validate syntax" button gives me an error no matter WHAT I put in the field.

Thanks,  
Brian


Answers:
author: Tessa Tuteleers
body: HI [@Brian Johnson](/t5/user/viewprofilepage/user-id/5558556) ,

Welcome to the community!

Let's break it down into pieces:

1. Does your AQL query work?   
   *You can test this easily in your CMDB scheme -\> Filter -\> advanced AQL itself. If you get multiple results there, then step 1 is complete.*
2. Does your custom field support multiple values and is the scope correct?   
   *You can test this in Jira. Try to add the 5 NUC objects manually in the field. If it works, then this step is complete. Otherwise, check you CF asset context*
3. Are you adding the objects correctly in the field using automation?*Add the AQL from step 1 in the custom field during your create or edit action.
   -\> I get the error as well, but it does work in my try, so just ignore that.*

Please let me know in which step you have trouble and share your results if possible with sccreenshots.

comments: author: Brian Johnson
body: Hi Tessa,

Thanks so much for your reply.

1. I'm embarrassed but I'm not exactly sure where you want me to navigate on this one. Is it the **Assets** area and then the search in the upper right?

![SCR-20240802-tulo.png](https://community.atlassian.com/t5/image/serverpage/image-id/339821i8DFD6164AF129544/image-size/large?v=v2&px=999 "SCR-20240802-tulo.png")

2. In my rule I'm trying to automate, I only see the option to edit the Linked Assets field with a query - not sure how to add several assets individually?

![SCR-20240802-twsk.png](https://community.atlassian.com/t5/image/serverpage/image-id/339822i0E0D8346A0958496/image-size/large?v=v2&px=999 "SCR-20240802-twsk.png")

3. Ah shoot, I think in this step you are talking about what I just showed in step 2.

But maybe these screenshots will help you see just how far off I likely am :-)

Thanks,

Brian


Tags: cloud

jira-service-management

jira-service-management-cloud
Service Desk Portal Users unable to see their own requests
Asked by Liam Puzon:

My entire company are able to access our service desk portal and raise issues. They are, however, unable to access their own requests. Even I, the Project Lead (with Admin permissions) cannot see any requests when clicking into the Requests page.

![image.png](https://community.atlassian.com/t5/image/serverpage/image-id/339472iB4753C4F768C7347/image-size/large?v=v2&px=999 "image.png")


Answers:
author: Seon Shakespeare
body: Hi [@Liam Puzon](/t5/user/viewprofilepage/user-id/5558544)

Welcome to the community!

It's unusual that no one in your company can see their requests in the service desk portal. This points to a potential configuration issue. Here are some areas to check:

**1. Customer Access:**

* **Review portal settings:** Go to your service desk project \> **Project settings** \> **Customer permissions**. Double-check that the settings here allow customers to access and view requests in the portal.

**2. Request Security Level:**

* **Look for restrictions:** Go to **Project settings** \> **Request security**. Is there a security level applied that might be hiding requests from customers?

Hope this helps!

comments: author: Liam Puzon
body: Thank you for the quick reply, Seon.

My Customer Permissions page doesn't show any option related to customers accessing \& viewing requests in the portal:

![image.png](https://community.atlassian.com/t5/image/serverpage/image-id/339620i5871D116A2A8CBBD/image-dimensions/391x298?v=v2 "image.png")

Further, I don't have a Request Security page in my Project Settings. I do have Issue Security, but it is not enabled on this project.

Any further help would be much appreciated!


author: Seon Shakespeare
body: Hi [@Liam Puzon](/t5/user/viewprofilepage/user-id/5558544) ,

Thanks for sharing that screenshot! Everything looks OK in your settings. I think it's best to loop in Atlassian Support directly: <https://support.atlassian.com/contact/>. They'll be able to look at your instance's specific configuration and hopefully figure out what's going on.

Hope they can get this sorted out for you quickly!


author: Liam Puzon
body: Thanks, Seon, I shall do that!


Tags: cloud

jira-service-management

jira-service-management-cloud
Problems with Portal only Customer SSO Azure AD (Entra ID)
Asked by Jannick Bettighofer:

Hi guys,

We have tried to connect our Azure AD (Entra ID) for the connection of the portal only customers in Jira Service Management.

We have followed the following instructions for the setup: [Configure SAML single sign-on for portal-only customers \| Atlassian Support](https://support.atlassian.com/security-and-access-policies/docs/configure-saml-single-sign-on-for-portal-only-customers/)

Now we have the following problem: A customer who is also stored in the application in the Azure AD tries to log in via SSO , but after entering the e-mail address the following error message appears: "You can't continue with single sign-on. Try again." But the authentication is shown as successful in the logs in Azure AD

In the Jira Settings SSO is enabled and the right identity provider is connected.

Is there any hidden setting to configure? Have any of you had experience with this problem?

Best regards and thank you in advance


Answers:
author: Darwish Baganian
body: Hi Jannick,

I was able to get mine working. Make sure you follow the guide from Microsoft below especially Step 12:

[Tutorial: Microsoft Entra SSO integration with Atlassian Cloud - Microsoft Entra ID \| Microsoft Learn](https://learn.microsoft.com/en-gb/entra/identity/saas-apps/atlassian-cloud-tutorial)

Do both of the attribute mappings so it looks like this

![Screenshot 2024-09-16 at 16.10.07.png](https://community.atlassian.com/t5/image/serverpage/image-id/347561i4AB6BA3F348FB21A/image-size/large?v=v2&px=999 "Screenshot 2024-09-16 at 16.10.07.png")


author: Darwish Baganian
body: Hi there. I too am getting the same error message.

Looking at the URL after logging in, it's saying Access Denied:

[https://ourdomain.atlassian.net/servicedesk/customer/user/login?error_code=access_denied\&destination=portals](https://ourdomain.atlassian.net/servicedesk/customer/user/login?error_code=access_denied&destination=portals)

Customer Permissions is set to Open and they are also allowed to create accounts.

Not sure why it's not working


Tags: cloud

customer

customer-portal

jira-service-management

jira-service-management-cloud

portal-only-customer

sso
Using Calendar with only one field
Asked by Jeremy_Rampe:

I have a request from the agents using JSM, they would like to be able to track when they have a customer call scheduled in the agent view. Is it possible to utilize the calendar function with only one field and a time?


Answers:
author: Tessa Tuteleers
body: Hi [@Jeremy_Rampe](/t5/user/viewprofilepage/user-id/4755278) ,

You can easily add a "Jira issues Calender" gadget to a dashboard, tracking a filter of issues using 1 date or date/time field.

Hope this helps!

- Tessa


Tags: cloud

jira-service-management

jira-service-management-cloud
Comparison between varaibles and numbers
Asked by Martina Mulino:

Hello!  

I'm using the automation functionality and I tried to use the "Create value" action to save a variable and compare it with a number but it does not work.  

Here is the smart value in the variable TotalComplexity:  

{{#=}} {{#if (issue.Deal type.isEmpty)}} 0 {{/}} {{#if(equals(issue.Deal type.value,"Private offering, budgettary RFI"))}} 1 {{/}} {{#if(equals(issue.Deal type.value,"RFP (private tender)"))}} 2 {{/}} + {{#if(equals(issue.RTI composition.value,"No RTI"))}} 1 {{/}} + 0 {{/}}  

And here is the comparison code I've written:  

{{#if ( {{TotalComplexity}} \>= 1 )}} HIGH {{/}}  

What am I doing wrong?  

Thank you,  
Martina


Answers:
author: Martina Mulino
body: This is how I solved the problem:  

{{#if ( TotalComplexity.asNumber.gte(30) )}} HIGH {{/}}


author: Rudy Holtkamp
body: Hi [@Martina Mulino](/t5/user/viewprofilepage/user-id/5558254) and welcome to the community,

First of all, I would loose the spaces within the TotalComplexity variable and I don't understand why you start with a math ({{#=}}) smart value. And I don't know why there is a +0.  
I would do it like this:

{{#if(issue.Deal type.isEmpty)}}0{{/}}{#if(equals(issue.Deal type.value,"Private offering, budgettary RFI"))}}1{{/}}{{#=}}{{#if(equals(issue.Deal type.value,"RFP (private tender)"))}}2{{/}}{{#if(equals(issue.RTI composition.value,"No RTI"))}}+1{{/}}{{/}}

this should result in a value 0,1,2 or 3. Check this by adding a audit log

Then for your comparison code use:

{{#if(TotalComplexity.AsNumber.gte(1))}}HIGH{{/}} -\>(see [math expressions](https://support.atlassian.com/cloud-automation/docs/jira-smart-values-math-expressions/#Greater-than-or-equal-to))

Kind regards,

Rudy


Tags: cloud

jira-service-management

jira-service-management-cloud