[JIRA] [crowd2] (JENKINS-24884) Unable to use SSO with Jenkins + Crowd
Kanstantsin Shautsou commented on JENKINS-24884 Unable to use SSO with Jenkins + Crowd Hi, could you check closed issues? There was some issues before but they are all were closed by requestor after setting right proxy and other settings. Plus add in jenkins configuration logger for crowd and jenkins/hudson.security, acegi classes to collect debug info. And open in chrome debug console and check in network connection requested/accepted "cookies" tab. This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [crowd2] (JENKINS-24884) Unable to use SSO with Jenkins + Crowd
Nadav Samet commented on JENKINS-24884 Unable to use SSO with Jenkins + Crowd Turns out the problem was the "restrict groups" settings. I assumed that leaving it blank will allow all groups. Adding a group name resolved the issue. Is this inconsistency between logging in and SSO a bug? This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [crowd2] (JENKINS-24884) Unable to use SSO with Jenkins + Crowd
Kanstantsin Shautsou commented on JENKINS-24884 Unable to use SSO with Jenkins + Crowd I checked code it calls the same getAuthoritiesForUser(). What groups specified in crowd server settings for jenkins application? This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [crowd2] (JENKINS-24884) Unable to use SSO with Jenkins + Crowd
Kanstantsin Shautsou edited a comment on JENKINS-24884 Unable to use SSO with Jenkins + Crowd I checked code it calls the same getAuthoritiesForUser(). What groups specified in crowd server settings for jenkins application? PS provide logs for classes that i mentioned (at least for de.theit.jenkins.crowd). This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [crowd2] (JENKINS-24884) Unable to use SSO with Jenkins + Crowd
Nadav Samet commented on JENKINS-24884 Unable to use SSO with Jenkins + Crowd There were two groups specified in the Crowd admin for the jenkins applications. In the Jenkins Crowd plugin settings the "restrict groups" setting left blank. The user I tested with belonged belonged to one of the allowed groups in Jenkins. I managed to fix the issue for our setup by adding the same group names to the "restrict groups" setting. Sep 27, 2014 7:21:51 PM FINER de.theit.jenkins.crowd.CrowdRememberMeServices SSO token available = check whether it is still valid... Sep 27, 2014 7:21:51 PM FINE com.atlassian.crowd.integration.rest.service.RestExecutor buildUrl Constructed https://crowd.corp.mycompany.com/crowd/rest/usermanagement/1/session/enWcUnsNdaPblvpJoWdPqg00 Sep 27, 2014 7:21:51 PM FINER de.theit.jenkins.crowd.CrowdRememberMeServices Retrieving SSO user... Sep 27, 2014 7:21:51 PM FINE com.atlassian.crowd.integration.rest.service.RestExecutor buildUrl Constructed https://crowd.corp.mycompany.com/crowd/rest/usermanagement/1/session/enWcUnsNdaPblvpJoWdPqg00?expand=user Sep 27, 2014 7:21:51 PM FINER de.theit.jenkins.crowd.CrowdRememberMeServices Retrieving SSO user... Sep 27, 2014 7:21:51 PM FINE com.atlassian.crowd.integration.rest.service.RestExecutor buildUrl Constructed https://crowd.corp.mycompany.com/crowd/rest/usermanagement/1/session/enWcUnsNdaPblvpJoWdPqg00?expand=user Sep 27, 2014 7:21:51 PM FINER de.theit.jenkins.crowd.CrowdRememberMeServices Retrieving SSO user... Sep 27, 2014 7:21:51 PM FINE com.atlassian.crowd.integration.rest.service.RestExecutor buildUrl Constructed https://crowd.corp.mycompany.com/crowd/rest/usermanagement/1/session/enWcUnsNdaPblvpJoWdPqg00?expand=user Sep 27, 2014 7:21:51 PM FINER de.theit.jenkins.crowd.CrowdRememberMeServices Validating group membership of user... Sep 27, 2014 7:21:51 PM FINER de.theit.jenkins.crowd.CrowdRememberMeServices Validating group membership of user... Sep 27, 2014 7:21:51 PM FINER de.theit.jenkins.crowd.CrowdRememberMeServices Retrieving SSO user... Sep 27, 2014 7:21:51 PM FINE com.atlassian.crowd.integration.rest.service.RestExecutor buildUrl Constructed https://crowd.corp.mycompany.com/crowd/rest/usermanagement/1/session/enWcUnsNdaPblvpJoWdPqg00?expand=user Sep 27, 2014 7:21:51 PM FINER de.theit.jenkins.crowd.CrowdRememberMeServices Validating group membership of user... Sep 27, 2014 7:21:51 PM FINER de.theit.jenkins.crowd.CrowdRememberMeServices Checking whether a SSO token is available... Sep 27, 2014 7:21:51 PM FINE com.atlassian.crowd.integration.http.util.CrowdHttpTokenHelperImpl getCrowdToken Checking for a SSO token that will need to be verified by Crowd. Sep 27, 2014 7:21:51 PM FINE com.atlassian.crowd.integration.http.util.CrowdHttpTokenHelperImpl getCrowdToken No request attribute token could be found, now checking the browser submitted cookies. Sep 27, 2014 7:21:51 PM FINE com.atlassian.crowd.integration.http.util.CrowdHttpTokenHelperImpl getCrowdToken Cookie name/value: screenResolution / 2560x1440 Sep 27, 2014 7:21:51 PM FINE com.atlassian.crowd.integration.http.util.CrowdHttpTokenHelperImpl getCrowdToken Cookie name/value: ACEGI_SECURITY_HASHED_REMEMBER_ME_COOKIE / Sep 27, 2014 7:21:51 PM FINE com.atlassian.crowd.integration.http.util.CrowdHttpTokenHelperImpl getCrowdToken Cookie name/value: JSESSIONID.bfef4e83 / 50cdakdjvmbzdnlmlrbtrojrz Sep 27, 2014 7:21:51 PM FINE com.atlassian.crowd.integration.http.util.CrowdHttpTokenHelperImpl getCrowdToken Cookie name/value: crowd.token_key / enWcUnsNdaPblvpJoWdPqg00 Sep 27, 2014 7:21:51 PM FINE com.atlassian.crowd.integration.http.util.CrowdHttpTokenHelperImpl getCrowdToken Accepting the SSO cookie value: enWcUnsNdaPblvpJoWdPqg00 Sep 27, 2014 7:21:51 PM FINE com.atlassian.crowd.integration.http.util.CrowdHttpTokenHelperImpl getCrowdToken Existing token value yet to be verified by Crowd: enWcUnsNdaPblvpJoWdPqg00 Sep 27, 2014 7:21:51 PM FINER de.theit.jenkins.crowd.CrowdRememberMeServices SSO token available = check whether it is still valid... Sep 27, 2014 7:21:51 PM FINE com.atlassian.crowd.integration.rest.service.RestExecutor buildUrl Constructed https://crowd.corp.mycompany.com/crowd/rest/usermanagement/1/session/enWcUnsNdaPblvpJoWdPqg00 Sep 27, 2014 7:21:51 PM FINE de.theit.jenkins.crowd.CrowdServletFilter User is logged in via Crowd, but no authentication token available; trying auto-login... Sep 27, 2014 7:21:51 PM FINER de.theit.jenkins.crowd.CrowdRememberMeServices Checking whether a SSO
[JIRA] [crowd2] (JENKINS-24884) Unable to use SSO with Jenkins + Crowd
Nadav Samet created JENKINS-24884 Unable to use SSO with Jenkins + Crowd Issue Type: Bug Assignee: Kanstantsin Shautsou Components: crowd2 Created: 27/Sep/14 12:49 AM Description: Authentication with the Jenkins plug in work well, however I am unable to use SSO. Expected behavior: 1. Log in at https://crowd.mydomain.com 2. Go to https://jenkins.mydomain.com 3. Get logged in. Actual behavior: 3. Displays login screen. FWIW, SSO works well between JIRA and Crowd. I am not seeing any lines on this misbehavior on neither Crowd or Jenkins log files. Inspecting the HTTP request it appears that the crowd token cookie is sent to Jenkins, and the name (default) is configured correctly in the plugin's configuration. Let me know if additional information is needed. Environment: Jenkins 1.581 on Ubuntu. Crowd 1.8 Plugin Crowd 2.7.2 Jenkins and Crowd are running on SSL behind Apache proxy. Project: Jenkins Priority: Major Reporter: Nadav Samet This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
