[JIRA] (JENKINS-37737) Intermittent login failures with Active Directory / Matrix-based security
Title: Message Title Hugo Deprez commented on JENKINS-37737 Re: Intermittent login failures with Active Directory / Matrix-based security Hello, I have the same issue, Jenkins can only reach 2 controller i my domain, so I use the servers option to point to the server it can reach (don't want to use round robin from Active directory). But I can see request to other domain controller which are not configured in my list. This cause login failure and various timeout. Here is my configuration : "hudson.plugins.active_directory.ActiveDirectorySecurityRealm" plugin="active-directory@2.0"> 192.168.1.2:636,192.168.1.3:636 CN=LDAP,OU=Users,DC=domain,DC=local DDHCNCNCCC/r9Rxf0HvCqt0QVuU= AUTO false plugin : 2.0 jenkins : 2.34 Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-37737) Intermittent login failures with Active Directory / Matrix-based security
Title: Message Title Vijaya Bhaskar Kadiri commented on JENKINS-37737 Re: Intermittent login failures with Active Directory / Matrix-based security Hello! We have the same problems with Jenkins ver. 2.7.1. Any ETA for the fix? Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-37737) Intermittent login failures with Active Directory / Matrix-based security
Title: Message Title Derek Sakauye commented on JENKINS-37737 Re: Intermittent login failures with Active Directory / Matrix-based security Hi JR, Our team is pretty small too. So we're in a similar pickle. We actually are running Jenkins with a domain service account. I'll try your "flushdns" workaround next time we can't login. I'll check with Domain Admins about cleaning up the DNS too. Thanks, Derek Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-37737) Intermittent login failures with Active Directory / Matrix-based security
Title: Message Title Jens Runge commented on JENKINS-37737 Re: Intermittent login failures with Active Directory / Matrix-based security Hi Derek, I admit its only a dirty workaround. Our Teams isn't that big, so I have done it every time somone can't login. Meanwhile our Administrators cleaned up the DNS, so that DomainDnsZones. only points to available systems. I assume, your Jenkins Service is running with a local server account. Then you can try to use a domain account as Jenkins service account on your Jenkins Server. Maybe then the windows native authentication for directory listing should not fail and would not fallback to non native authentication. Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-37737) Intermittent login failures with Active Directory / Matrix-based security
Title: Message Title Derek Sakauye commented on JENKINS-37737 Re: Intermittent login failures with Active Directory / Matrix-based security Hi JR, Is your workaround to prevent the issue from occurring? Or do you apply the ipconfig /flushdns only when you experience the logon authentication issue? Thanks for the help! Best regards, Derek Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-37737) Intermittent login failures with Active Directory / Matrix-based security
Title: Message Title Jens Runge commented on JENKINS-37737 Re: Intermittent login failures with Active Directory / Matrix-based security Hi Derek, i meant the Active Directory plugin too. It was only a mistake in writing. Our Jenkins runs on a Windows server. On console a "ipconfig /flushdns" should help you. For Linux i found this page: http://www.cyberciti.biz/faq/rhel-debian-ubuntu-flush-clear-dns-cache/ Maybe you have to search a other solution for your Linux-Distribution. Greetings JR Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-37737) Intermittent login failures with Active Directory / Matrix-based security
Title: Message Title Derek Sakauye commented on JENKINS-37737 Re: Intermittent login failures with Active Directory / Matrix-based security JR, Thanks for your reply. We have yet to resolve our issue. However, I wanted to note that we are using the AD Plugin (not LDAP-plugin). Does your workaround still apply? If so, how do we clear the name resolving cache on the jenkins server? Thanks! Derek Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-37737) Intermittent login failures with Active Directory / Matrix-based security
Title: Message Title Jens Runge commented on JENKINS-37737 Re: Intermittent login failures with Active Directory / Matrix-based security Hello! We have the same problems here. In our case i supect the reason in offline locations (DomainControllers listet in DomainDnsZones.). Until i convince our administrators to remove this offline locations from DNS, my workaround is to clear the name resolving cache on the jenkins server. IMO the LDAP-plugin ignores the configured LDAP-servers and resolve the Domain Controllers over DNS lookup DomainDnsZones. and runs into the problem with not available servers listet in DNS. Greetings JR Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-37737) Intermittent login failures with Active Directory / Matrix-based security
Title: Message Title Derek Sakauye assigned an issue to Félix Belzunce Arcos Jenkins / JENKINS-37737 Intermittent login failures with Active Directory / Matrix-based security Change By: Derek Sakauye Assignee: Derek Sakauye Félix Belzunce Arcos Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-37737) Intermittent login failures with Active Directory / Matrix-based security
Title: Message Title Derek Sakauye created an issue Jenkins / JENKINS-37737 Intermittent login failures with Active Directory / Matrix-based security Issue Type: Bug Assignee: Derek Sakauye Components: active-directory-plugin Created: 2016/Aug/27 3:06 PM Environment: Jenkins ver. 1.653. Active Directory Plugin 1.47 (Windows AD, Matrix-based security) Windows Server 2012 R2 Chrome Labels: login authentication Priority: Major Reporter: Derek Sakauye Helllo! We are experiencing intermittent login issues since early August, 2016 for all users from any browser or workstation (location does not seem to be an issue). We have a cross domain - VPN tunnel, which has not experienced recent outages to cause failed logons or AD lookups. Other systems relying on the VPN tunnel are not experiencing authentication issues. Successful manual telnet tests between the Domain Controllers were successful during Jenkins failed logins. We are not ruling out a network issue but we can't see any problems. We have not recently upgraded Jenkins or the Active Directory Plugin. Looking forward to any help to resolve our issue. Output from log: Aug 27, 2016 7:11:51 AM hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider retrieveUser WARNING: Credential exception trying to authenticate against ### domain org.acegisecurity.BadCredentialsException: Failed to retrieve user information for ##; nested exception is javax.naming.PartialResultException [Root exception is javax.naming.CommunicationException: DomainDnsZones. [Root exception is
