[JIRA] [core] (JENKINS-25180) Unable to authenticate using LDAP after upgrading to 1.576 or higher
uncletall closed JENKINS-25180 as Fixed Unable to authenticate using LDAP after upgrading to 1.576 or higher I have tested 1.592 and the issue is fixed Change By: uncletall (03/Dec/14 4:00 AM) Status: Open Closed Resolution: Fixed This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [core] (JENKINS-25180) Unable to authenticate using LDAP after upgrading to 1.576 or higher
uncletall commented on JENKINS-25180 Unable to authenticate using LDAP after upgrading to 1.576 or higher I am not so sure how to do that. But I have just tested 1.589 and the problem is still present in this version. I can't find the tag in GitHub and the latest link still points to the 1.588 on the web site so I don't know if the 1.589 is officially released. But as JENKINS-25144 is marked as fixed I would have expected this issue to be fixed as well. This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [core] (JENKINS-25180) Unable to authenticate using LDAP after upgrading to 1.576 or higher
J. Kirchner commented on JENKINS-25180 Unable to authenticate using LDAP after upgrading to 1.576 or higher Is disabling cookies a workaround for you? This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [core] (JENKINS-25180) Unable to authenticate using LDAP after upgrading to 1.576 or higher
Daniel Beck commented on JENKINS-25180 Unable to authenticate using LDAP after upgrading to 1.576 or higher The linked fix should only affect use of Basic Auth, which isn't part of regular login procedure. Weird. This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [core] (JENKINS-25180) Unable to authenticate using LDAP after upgrading to 1.576 or higher
Daniel Beck commented on JENKINS-25180 Unable to authenticate using LDAP after upgrading to 1.576 or higher Well, the reverse proxy auth bit was missing from the description. So there's actually a simple workaround? Just don't use Apache for authentication? This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [core] (JENKINS-25180) Unable to authenticate using LDAP after upgrading to 1.576 or higher
uncletall commented on JENKINS-25180 Unable to authenticate using LDAP after upgrading to 1.576 or higher I don't think that's a good idea. We now have our development setup in such a way that 4 (Jenkins, Gerrit, wiki and bugtraker) sites share the same authentication mechanism. This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [core] (JENKINS-25180) Unable to authenticate using LDAP after upgrading to 1.576 or higher
uncletall commented on JENKINS-25180 Unable to authenticate using LDAP after upgrading to 1.576 or higher I did actually mention in the environment description that authentication is done by Apache and passed on to Jenkins. This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [core] (JENKINS-25180) Unable to authenticate using LDAP after upgrading to 1.576 or higher
uncletall edited a comment on JENKINS-25180 Unable to authenticate using LDAP after upgrading to 1.576 or higher I don't think that's a good idea. We now have our development environment setup in such a way that 4 (Jenkins, Gerrit, wiki and bugtraker) sites share the same authentication mechanism. Changing that would result in a lot of broken URLs This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [core] (JENKINS-25180) Unable to authenticate using LDAP after upgrading to 1.576 or higher
Daniel Beck commented on JENKINS-25180 Unable to authenticate using LDAP after upgrading to 1.576 or higher Right, sorry about that. Steps to reproduce looked so complete This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [core] (JENKINS-25180) Unable to authenticate using LDAP after upgrading to 1.576 or higher
uncletall
created JENKINS-25180
Unable to authenticate using LDAP after upgrading to 1.576 or higher
Issue Type:
Bug
Assignee:
Unassigned
Components:
core
Created:
16/Oct/14 9:40 AM
Description:
After upgrading to 1.576 or higher LDAP authentication fails. It is very repeatable and downgrading to 1.575 fixes the issue. I have tried 1.576 1.577 1.580 and 1.584 but am unable to log in.
Basically, I disable security and then setup the same config again and am still unable to log in.
I am using ldap 1.6 plugin but have also tried 1.11, both fail once I enable ldap authentication.
This is my configuration from the config.xml
useSecuritytrue/useSecurity
authorizationStrategy class="hudson.security.AuthorizationStrategy$Unsecured"/
securityRealm class="hudson.security.LDAPSecurityRealm" plugin="ldap@1.6"
serverldap://ldap/server
rootDN/rootDN
inhibitInferRootDNfalse/inhibitInferRootDN
userSearchBaseou=users,dc=xxx,dc=com,dc=sg/userSearchBase
userSearchuid={0}/userSearch
groupSearchBaseou=jenkins,ou=groups,dc=xxx,dc=com,dc=sg/groupSearchBase
managerDNcn=admin,dc=xxx,dc=com,dc=sg/managerDN
managerPasswordxxx/managerPassword
disableMailAddressResolverfalse/disableMailAddressResolver
/securityRealm
Environment:
ubuntu 12.04 and 14.04 openldap
Project:
Jenkins
Priority:
Blocker
Reporter:
uncletall
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira
--
You received this message because you are subscribed to the Google Groups Jenkins Issues group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[JIRA] [core] (JENKINS-25180) Unable to authenticate using LDAP after upgrading to 1.576 or higher
Daniel Beck commented on JENKINS-25180 Unable to authenticate using LDAP after upgrading to 1.576 or higher For a blocker bug this is a bit light on details. What's the error shown in the log? This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [core] (JENKINS-25180) Unable to authenticate using LDAP after upgrading to 1.576 or higher
uncletall
updated JENKINS-25180
Unable to authenticate using LDAP after upgrading to 1.576 or higher
Change By:
uncletall
(17/Oct/14 1:40 AM)
Environment:
ubuntu12.04and14.04openldap
,authenticationisnormallydonebyApacheandtheuserinformationshouldberetrievedbyJenkinsfromldap.
Description:
Afterupgradingto1.576orhigherLDAPauthenticationfails.Itisveryrepeatableanddowngradingto1.575fixestheissue.Ihavetried1.5761.5771.580and1.584butamunabletologin.Basically,Idisablesecurityandthensetupthesameconfigagainandamstillunabletologin.Iamusingldap1.6pluginbuthavealsotried1.11,bothfailonceIenableldapauthentication.Thisismyconfigurationfromtheconfig.xmluseSecuritytrue/useSecurityauthorizationStrategyclass=hudson.security.AuthorizationStrategy$Unsecured/securityRealmclass=hudson.security.LDAPSecurityRealmplugin=ldap@1.6serverldap://ldap/serverrootDN/rootDNinhibitInferRootDNfalse/inhibitInferRootDNuserSearchBaseou=users,dc=xxx,dc=com,dc=sg/userSearchBaseuserSearchuid={0}/userSearchgroupSearchBaseou=jenkins,ou=groups,dc=xxx,dc=com,dc=sg/groupSearchBasemanagerDNcn=admin,dc=xxx,dc=com,dc=sg/managerDNmanagerPasswordxxx/managerPassworddisableMailAddressResolverfalse/disableMailAddressResolver/securityRealm
Stepstoreproduce:1.FreshinstallofJenkins1.584fromUbuntuapt-getinstalljenkins2.Entersettingsascanbeusedupto1.5753.Addthedisplaynameisthecn4.Authorization:Anyonecandoanything(IusedmatrixbeforebutfornowIamhappytologin)5.Save6.MynameisshownasPeterBruin,proofthatthiswasretrievedfromldaporelseitwouldbepeterbruinwhichismyusername7.NavigatebacktoManageandIgetpromptedforpassword8.Nologentriesin/var/log/jenkins/jenkins.log9.Unabletoaccessthesystemlog(/log/all)asIamnotabletoaccessJenkins10.Downgradeto1.575andIcanloginagain
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira
--
You received this message because you are subscribed to the Google Groups Jenkins Issues group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[JIRA] [core] (JENKINS-25180) Unable to authenticate using LDAP after upgrading to 1.576 or higher
uncletall
updated JENKINS-25180
Unable to authenticate using LDAP after upgrading to 1.576 or higher
Change By:
uncletall
(17/Oct/14 1:50 AM)
Description:
Afterupgradingto1.576orhigherLDAPauthenticationfails.Itisveryrepeatableanddowngradingto1.575fixestheissue.Ihavetried1.5761.5771.580and1.584butamunabletologin.Basically,Idisablesecurityandthensetupthesameconfigagainandamstillunabletologin.Iamusingldap1.6pluginbuthavealsotried1.11,bothfailonceIenableldapauthentication.Thisismyconfigurationfromtheconfig.xmluseSecuritytrue/useSecurityauthorizationStrategyclass=hudson.security.AuthorizationStrategy$Unsecured/securityRealmclass=hudson.security.LDAPSecurityRealmplugin=ldap@1.6serverldap://ldap/serverrootDN/rootDNinhibitInferRootDNfalse/inhibitInferRootDNuserSearchBaseou=users,dc=xxx,dc=com,dc=sg/userSearchBaseuserSearchuid={0}/userSearchgroupSearchBaseou=jenkins,ou=groups,dc=xxx,dc=com,dc=sg/groupSearchBasemanagerDNcn=admin,dc=xxx,dc=com,dc=sg/managerDNmanagerPasswordxxx/managerPassworddisableMailAddressResolverfalse/disableMailAddressResolver/securityRealmStepstoreproduce:1.FreshinstallofJenkins1.584fromUbuntuapt-getinstalljenkins2.Entersettingsascanbeusedupto1.5753.Addthedisplaynameisthecn4.Authorization:Anyonecandoanything(IusedmatrixbeforebutfornowIamhappytologin)5.Save6.MynameisshownasPeterBruin,proofthatthiswasretrievedfromldaporelseitwouldbepeterbruinwhichismyusername7.NavigatebacktoManageandIgetpromptedforpassword8.Nologentriesin/var/log/jenkins/jenkins.log9.Unabletoaccessthesystemlog(/log/all)asIamnotabletoaccessJenkins10.Downgradeto1.575andIcanloginagain
Howthisaffectedmyupgrade:1.Upgradefrom1.557to1.5842.AbletoacessjenkinsuntilIwantedtogoManage3.Promptedforpasswordandunabletologin4.Edittedtheconfig.xmlanddisablesecurity5.Updatedpluginfrom1.6tolatest6.Spendhoursmessingaroundwithldapsettings7.Needtorestartserveraftereverytime,takesafewminutes8.DowngradedandwasabletologinagainOfcoursemybadfordoingthisonourproductionserverbutIdidntexpectthiskindoftrouble.Costmemostofthelasttwodaystryingtogetitworking.Anyhelpwithtroubleshootingwouldbewelcome.HowcanIgetmoreloginfooutofJenkins,Idontseemuchinthe/var/log/jenkins/jenkins.logfileandtheSystemLogisuselessasIamunabletoaccessitafterIenablesecurity
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira
--
You received this message because you are subscribed to the Google Groups Jenkins Issues group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[JIRA] [core] (JENKINS-25180) Unable to authenticate using LDAP after upgrading to 1.576 or higher
uncletall
updated JENKINS-25180
Unable to authenticate using LDAP after upgrading to 1.576 or higher
Change By:
uncletall
(17/Oct/14 1:52 AM)
Description:
Afterupgradingto1.576orhigherLDAPauthenticationfails.Itisveryrepeatableanddowngradingto1.575fixestheissue.Ihavetried1.5761.5771.580and1.584butamunabletologin.Basically,Idisablesecurityandthensetupthesameconfigagainandamstillunabletologin.Iamusingldap1.6pluginbuthavealsotried1.11,bothfailonceIenableldapauthentication.Thisismyconfigurationfromtheconfig.xmluseSecuritytrue/useSecurityauthorizationStrategyclass=hudson.security.AuthorizationStrategy$Unsecured/securityRealmclass=hudson.security.LDAPSecurityRealmplugin=ldap@1.6serverldap://ldap/serverrootDN/rootDNinhibitInferRootDNfalse/inhibitInferRootDNuserSearchBaseou=users,dc=xxx,dc=com,dc=sg/userSearchBaseuserSearchuid={0}/userSearchgroupSearchBaseou=jenkins,ou=groups,dc=xxx,dc=com,dc=sg/groupSearchBasemanagerDNcn=admin,dc=xxx,dc=com,dc=sg/managerDNmanagerPasswordxxx/managerPassworddisableMailAddressResolverfalse/disableMailAddressResolver/securityRealmStepstoreproduce:1.FreshinstallofJenkins1.584fromUbuntuapt-getinstalljenkins2.Entersettingsascanbeusedupto1.5753.Addthedisplaynameisthecn4.Authorization:Anyonecandoanything(IusedmatrixbeforebutfornowIamhappytologin)5.Save6.MynameisshownasPeterBruin,proofthatthiswasretrievedfromldaporelseitwouldbepeterbruinwhichismyusername7.NavigatebacktoManageandIgetpromptedforpassword8.Nologentriesin/var/log/jenkins/jenkins.log9.Unabletoaccessthesystemlog(/log/all)asIamnotabletoaccessJenkins10.Downgradeto1.575andIcanloginagainHowthisaffectedmyupgrade:1.Upgradefrom1.557to1.5842.AbletoacessjenkinsuntilIwantedtogoManage3.Promptedforpasswordandunabletologin4.Edittedtheconfig.xmlanddisablesecurity5.Updated
LDAP
pluginfrom1.6tolatest6.Spendhoursmessingaroundwithldapsettings7.Needtorestartserveraftereverytime,takesafewminutes8.DowngradedandwasabletologinagainOfcoursemybadfordoingthisonourproductionserverbutIdidntexpectthiskindoftrouble.Costmemostofthelasttwodaystryingtogetitworking.Anyhelpwithtroubleshootingwouldbewelcome.HowcanIgetmoreloginfooutofJenkins,Idontseemuchinthe/var/log/jenkins/jenkins.logfileandtheSystemLogisuselessasIamunabletoaccessitafterIenablesecurity
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira
--
You received this message because you are subscribed to the Google Groups Jenkins Issues group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[JIRA] [core] (JENKINS-25180) Unable to authenticate using LDAP after upgrading to 1.576 or higher
uncletall commented on JENKINS-25180 Unable to authenticate using LDAP after upgrading to 1.576 or higher I found a fix here: https://github.com/jenkinsci/jenkins/pull/1427 So I guess this is related to: https://issues.jenkins-ci.org/browse/JENKINS-25144 I build the version from Christof Schoell and tested it on my server. After this the LDAP authentication works and I can get back into the Manage page after enabling security This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
