Lock out users during maintenance

Currently we have JIRA 6.3, Stash 3.6 and Confluence 5.7 hosted on our infrastructure and attached them to our active directory.

During recurring maintenance activities (e.g. the one we have planned now to upgrade to JIRA Software, Bitbucket 4 and Confluence 5.9) we'd like to be able to prevent all users from login in or performing any actions/checkins - except for system administrators (they of course need to be able to do whatever they need).

Our first try was removing the jira-users/stash-users/confluence-users group from the Global Permissions, so they don't have the rights to login.

However, during the application's upgrade process on our test instance we noticed that the groups are added again automatically to the corresponding permissions during upgrade installation. So after upgrade has finished the users would automatically be able to login again. But this is not what we want, because after the upgrade installation we still want to be able to perform further maintenance and tests before allowing the users to login again.

Is there any maintenance mode that can be enabled or something similar? Or how do you prevent your users from login in?

4 answers

Hi

If your installations are behind a proxy server then you can change the mapping to point at a maintenance page there but provide a different url/port for the system administrators to access.

If not behind a proxy then there is a similar method which requires you to edit the port on which you currently host.  See https://confluence.atlassian.com/jira/changing-jira-s-tcp-ports-135949.html for JIRA and https://confluence.atlassian.com/bitbucketserver/changing-the-port-that-bitbucket-server-listens-on-776640049.html for Bitbucket. Your system administrators can then continue to access on the new port until all maintenance is complete at which point you would revert to your normal port.

 

Hope this helps

Phill

There should be a way to lock/unlock the Bitbucket server in the way you requested:

https://confluence.atlassian.com/bitbucketserver/using-bitbucket-server-diy-backup-776640056.html - Sections: Lock the Bitbucket Server instance /Unlock the Bitbucket Server instance

As I'm only using Bitbucket - I cannot say anything about confluence of JIRA ...

Haven't tested it - so cannot help any further ....

It's only possible to lock the complete bitbucket server. I recently needed a possibility to lock single repositories - but this seems not to be available the easy way. See: https://answers.atlassian.com/questions/32973719/lock-single-repositories-for-maintainance-purposes

What happens if I lock the Bitbucket instance via REST API? - Can an Administrator still log in? - Is the lock kept during/after I perform a Bitbucket application upgrade? Or is it reset automatically during upgrade installation?

  • You can change the ports and reset it to correct one after the Upgrades

 

0 vote
Steven Behnke Community Champion Dec 17, 2015

You need to handle this from a System Administrator perspective rather than from the application side. There's a million ways to control access and provide a nice system down screen with any webserver you may be fronting your applications with. If you aren't fronting the apps, then you should try approaching this from the Tomcat side. Most of the time I front my applications with a webserver, which gives me this control in multitudes. 

Suggest an answer

Log in or Sign up to answer
Atlassian Community Anniversary

Happy Anniversary, Atlassian Community!

This community is celebrating its one-year anniversary and Atlassian co-founder Mike Cannon-Brookes has all the feels.

Read more
Community showcase
Piotr Plewa
Published Dec 27, 2017 in Bitbucket

Recipe: Deploying AWS Lambda functions with Bitbucket Pipelines

Bitbucket Pipelines helps me manage and automate a number of serverless deployments to AWS Lambda and this is how I do it. I'm building Node.js Lambda functions using node-lambda&nbsp...

2,008 views 1 5
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you