[JIRA] (JENKINS-32909) Reverse proxy auth plugin v1.5 gives NullPointerException

[jeremy.gr...@tomtom.com (JIRA)]

Title: Message Title

Jeremy Green commented on JENKINS-32909   Re: Reverse proxy auth plugin v1.5 gives NullPointerException This issue is duplicated by JENKINS-33477. As it suggests, I was able to avoid this NPE (when using version 1.5 of plugin) by removing Authorization headers in my apache front end: RequestHeader unset Authorization That's a good thing to do anyway - jenkins has no need to see what are essentially clear-text passwords (basic auth only base64 encodes the password). (Since blocking this header is easy and a good thing to do, I've not checked whether apache is forwarding passwords - given the NPE, maybe it's not.) I'm not currently interested in API tokens, so haven't thought about them too much here. If you're using a reverse proxy, you'd probably just authenicate in the proxy anyway. They're only long basic auth passwords generated by jenkins, so external systems don't care where they are processed. The wiki pages that explain how to configure apache etc. should perhaps be updated to add removal of Authorization header: https://wiki.jenkins-ci.org/display/JENKINS/Reverse+Proxy+Auth+Plugin https://wiki.jenkins-ci.org/display/JENKINS/Running+Jenkins+behind+Apache Add Comment   This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.