Dan Dragut edited a comment on Bug JENKINS-17718

I believe this might be the change that broke it in 1.31 - might be because is escaping the "="?
https://github.com/jenkinsci/active-directory-plugin/commit/ef66cbbb2ce3f466b2d6468187b59e7088113077

The logger shows the "dn" variable unescaped (for="" but in fact it uses the escaped version to connect.
https://github.com/jenkinsci/active-directory-plugin/blob/ef66cbbb2ce3f466b2d6468187b59e7088113077/src/main/java/hudson/plugins/active_directory/ActiveDirectoryAuthenticationProvider.java

"active-directory-plugin / src / main / java / hudson / plugins / active_directory / ActiveDirectoryAuthenticationProvider.java"
// to do bind with DN as the user name, the flag must be 0
            IADsUser usr;
            try {
                usr = (authentication==null
                    ? dso.openDSObject("LDAP://"+ ldapEscape(dn), null, null, 0)
                    : dso.openDSObject("LDAP://"+ ldapEscape(dn), dn, password, 0))
                        .queryInterface(IADsUser.class);
            } catch (ComException e) {
                // this is failing
                String msg = String.format("Incorrect password for %s for=%s: error=%08X", username, dn, e.getHRESULT());
                LOGGER.log(Level.FINE, "Login failure: "+msg,e);
                throw (BadCredentialsException)new BadCredentialsException(msg).initCause(e);
            }

To revert to 1.30 download hpi, save into plugins dir and restart Jenkins.
http://updates.jenkins-ci.org/download/plugins/active-directory/
http://stackoverflow.com/questions/14950408/how-to-install-a-plugin-in-jenkins-manually

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira

--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
 
 

Reply via email to