JIRA CROWD

[forums-5]

Guys,

I have installed CROWD and have two administrator accounts which I can use to login into JIRA. But, when I use my CROWD login credentials to login to JIRA, I can't do anything at all - all I can do is log out again.

Any ideas will be hugely appreciated.

Thanks.
--
Post by mojo - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

Try restarting JIRA and then logging in. There is issue filed in Crowd regarding same, please vote for it. http://jira.atlassian.com/browse/CWD-1283
--
Post by vbharara - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

If you are still stuck after restarting, have a look at your logs.  Attach them here if you can't see any problem or don't understand them.
--
Post by broughn2 - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

Guys,
I still can't login to JIRA using my CROWD credentials - Please find attached my access log.

I can login to the JIRA dashboard at: http://my_computer_name:8080/secure/Dashboard.jspa. But when i do login, the only operation that i can perform is to logout again.

One place where i can't login at all (even with my JIRA administrator credentials) is: http://my_computer_name:8080/login.jsp

Also, another thing that i was asked to delete the lock file in: C:\Program Files\Atlassian\Application Data\JIRA. But each time  that i stop and restart the JIRA server, the lock file (named .jira-home.lock) reappears in C:\Program Files\Atlassian\Application Data\JIRA (I am runing JIRA on a windows XP machine).

Help will be hugely appreciated.
--
Post by mojo - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

I have the exact same problem.
I have installed a new JIRA instance (version 4)
I also installed a new CROWD instance (version 2.0.2)
I have imported all my old users into the new CROWD.
I setup the new JIRA instance to point to this CROWD and created a new blank database.

The next steps for me now is to import/restore the backup from my old JIRA..
But, i cannot access the admin menu in JIRA.. I tried several things.
The old JIRA is working nicly with the old CROWD.

Regards
Svein Thomas
--
Post by norsve - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

Sorry, I meant the application logs.

They should tell you whether your Jira is checking your password against the local Jira password (in which case we need to think about resetting that to something you know) or if it really is going out to Crowd to check the access.

One other thing to try though - add a dummy account to crowd called something like "jiratemp", and add it into the "jira-administrators" group.  Then try to log in as that to your Jiras.  Whether it passes or fails, it will tell us more info.
--
Post by broughn2 - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

Well, i did actually that. Added a dummy account to crowd and logged into JIRA.
I added the account to jira-administrators, jira-users and jira-developers.
But still I cant access the administration part of JIRA. Is there some logs that I can fetch from JIRA/CROWD that you want to see?

Regards
Svein Thomas
--
Post by norsve - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

The application logs might tell you more (atlassian-jira.log and atlassian-crowd.log to begin with), but it's interesting that you can create a new user and log in as them

What groups do they belong to when you visit their profile in Jira?  That would confirm whether Jira is reading the Crowd groups or not...
--
Post by broughn2 - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

Where do i find this logs? I can't find them.
And when i login with the jiraadmin user into jira and go to its Profile, I see the three groups that i added to the user in crowd (jira-users, jira-administrators and jira-developers).

Regards
Svein Thomas
--
Post by norsve - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

The atlassian-jira.log is usually found in the directory in which you start it from, although it can be redirected, and some application servers, and/or administrators move it to places that suit them better.

The simplest thing to do is a search, starting at the top level of your Jira install - that should find something of use.

>I see the three groups that i added to the user in crowd (jira-users, jira-administrators and jira-developers)
Ok, that implies that the system settings have been modified or corrupted.  You are going to need direct read access to the database to establish the exact problem and which users might be able to help, and possibly write access to fix it.  In Jira terms, it suggests that the group "jira-administrators" has had it's right to administrate the system removed...
--
Post by broughn2 - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

Oki, i found the log files.
Jira and crowd are installed on the same server.
I have set them up to run as services.
They start with the system account.

They run on a Windows 2008 Server SP2

I deleted the logs and did the creation of the jiraadmin user in crowd, added the jira groups and logged onto jira afterwords.
I hope the logs show you something wrong...
The logs are attached ;)
--
Post by norsve - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

Ok, nothing of use in there, which is good and bad - means you're not doing anything significantly wrong, but it doesn't tell us anything of any use!

Next step - try logging in as the jira admin user and then going directly to one of the admin urls - the best one to hit would be http://<server/jirabaseurl>/secure/admin/jira/GlobalPermissions.jspa

As you don't have admin rights, you should be denied access, but it should tell you that in the Jira application log.

One other thing that would be extremely helpful - could you log into the database (read only, of course) and post the results of:
{code}
select * from schemepermissions where scheme is null ;
{code}
--
Post by broughn2 - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

I could not access the url after logging in with jiraadmin.

This is the result of the query, but i had to rewrite the query a bit cause i logged in as sa.
All tables is owned by a schema called jiraschema.

the query:
select * from jiraschema.schemepermissions where scheme is null
the result:
10000 NULL 1 group jira-users
10001 NULL 27 group jira-developers
10002 NULL 24 group jira-developers
10031 NULL 22 group jira-users
10040 NULL 33 group jira-users


I see from this that the group jira-administrators is missing.. is this correct?

Svein Thomas
--
Post by norsve - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

Yes, someone or something has killed your admin access!

This is where you need to be very carefull, because you need to hack the database to fix it.  Basically, use the database tools to take a backup of the database, and test you can restore from it

Once you're happy with the backup, you need to stop Jira, insert a single row into that table and restart it.  You won't need to re-index (and technically, you might actually be able to get away without the stop/start, but I'm not sure enough to recommend it)

I cannot tell you what the ID should be, because I don't know what else you have in the table.  It must be unique to the entire table.  I would use the first "free" one after 10000.  If you don't have any free, you might need to worry about sequence_value_item too, updating the counter in there so you can add to the end.

In my dev Jira, I have:

||  id   || scheme || permission || perm_type ||   perm_parameter    ||
| 10000 |        |          0 | group     | jira-administrators|

There are probably other repairs you need to do, but I would just do this single line, try the login, and if it works, use that to repair any other global permissions.
--
Post by broughn2 - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

Thanks a lot... By inserting that record the admin menu appeared :)
--
Post by norsve - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

I am experiencing the same issues that MU is experiencing.  I am able to login via crowd using the url:

http://hostname/secure/Dashboard.jspa

but if I was to click on either of the following login links:

http://hostname/login.jsp?os_destination=%2Fsecure%2FDashboard.jspa

or access the login page via

http://hostname/login.jsp

I get the error "Sorry, your username and password are incorrect - please try again."  However, If I hit the back key to take me to the dashboard.jspa page I find that I am already logged in.  the stout_xxxxx.log shows an error:

2009-11-20 06:42:57,499 http-8665-Processor13 WARN anonymous 24168x12981x4 1n36nam http://hostname/rest/gadget/1.0/project/generate [atlassian.seraph.auth.DefaultAuthenticator] Could not find user : fuadm in UserManager : com.opensymphony.user.EntityNotFoundException: No user fuadm found
2009-11-20 06:44:04,295 http-8665-Processor9 WARN anonymous 24234x13167x1 1dt7wxt http://hostname/rest/api/1.0/dropdowns [atlassian.seraph.auth.DefaultAuthenticator] Could not find user : fuadm in UserManager : com.opensymphony.user.EntityNotFoundException: No user fuadm found
--
Post by FuadMoghe - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

The back key can have odd effects, depending on what your browser caches and what it sends (or doesn't send) to an application.

What matters here is whether you are logged in when you try to read fresh pages from Jira or if you are trying to update data.  What do you get if you use Jira by clicking the links offered to you on the pages you land on?
--
Post by broughn2 - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user

[forums-5]

The back key would not be an issue in this case.  Here are my steps.

Login via login. jsp fails.  Login via dashboard works with the same ID.  Therefore anytime I want to login I have to access the dashboard page.  This can be done by accessing the URL or clicking on back, (assuming I was on dashboard).  I have tested by not clicking on back and get the same results


1. I attempt to login via http://hostname/login.jsp and get the error
                   {code}Sorry, your username and password are incorrect - please try again. {code}
2. I know that if I attempt to login via http://hostname/secure/Dashboard.jspa that I will be successfull.  I therefore browse to the page (http://hostname/secure/Dashboard.jspa) and I find that I am logged already logged in.  i do not have to enter the credentials.  

Before I attempt to login via the login.jsp page.  I ensure that I am logged out by attempting to login with non valid addresses.  

I would assume that dashboard.jspa and login.jsp use the same authentication. It seems that I am missing a configuration value that points the login.jsp page to authenticate via crowd as does the dashboard page.
--
Post by FuadMoghe - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=38539
_______________________________________________
Jira-user mailing list
Jira-user@...
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user