Summary

      Setup Bamboo on Windows system with NTFS filesystem
      Create Bamboo home folder and remove Bamboo user from permission list (for example leave only group which Bamboo user belongs to)
      When Bamboo first time tries to initialise SecretEncryptionService it stores cipher part to filesystem to BAMBOO_HOME/xml-data/configuration/cipher. When this folder created Bamboo removes all existing permissions and leave only owner. In case owner is not in the list of ACLs Bamboo removes all existing ACLs and can't have access to this folder anymore.

      All activity which requires SecretEncryptionService don't work

      Workaround

      Add Bamboo user explicitly to BAMBOO_HOME folder ACLs

            [BAM-18650] Can't save file part of cipher on Windows NTFS

            4cef8b000137 grant Bamboo user full permissions to %BAMBOO_HOME%/xml-dir/configuration/cipher
            Problem is that Bamboo removes all groups and users except itself from this folder.

            Alexey Chystoprudov added a comment - 4cef8b000137 grant Bamboo user full permissions to %BAMBOO_HOME%/xml-dir/configuration/cipher Problem is that Bamboo removes all groups and users except itself from this folder.

            @Jozef can you please say in more details how to fix this problem? I run all installation scripts under Administator user but this error is always occure

            Андрей Рязанцев added a comment - @Jozef can you please say in more details how to fix this problem? I run all installation scripts under Administator user but this error is always occure

            I also encountered this problem somehow and worked around it by un-installing and re-installing Bamboo and installing the service, and then, before starting the service, changing the Log on user of the service to an account that has local admin access.

            Jozef Vandenmooter added a comment - I also encountered this problem somehow and worked around it by un-installing and re-installing Bamboo and installing the service, and then, before starting the service, changing the Log on user of the service to an account that has local admin access.

              achystoprudov Alexey Chystoprudov
              achystoprudov Alexey Chystoprudov
              Affected customers:
              4 This affects my team
              Watchers:
              8 Start watching this issue

                Created:
                Updated:
                Resolved: