Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-10150

[Active Directory] Group authentication problem

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: Major Major
    • active-directory-plugin
    • None
    • Windows 2008 Server x86
      Jenkins 1.417
      Jenkins Active Directory plugin 1.18

      Common Scenario

      • Security: Active Directory
      • Strategy: Project-based Matrix Authorization Strategy.
      • User X is in group G.
      Scenario 1

      1. Add user X with Admin and Read roles in 'Overall' section.
      2. X can log properly. Therefore, the plugin works fine.

      =)

      Scenario 2

      1. Add group G with Admin and Read roles in 'Overall' section.
      2. I am trying to log with user X.
      3. I got 'X is missing the Read permission' and I couldn't log in.

      =(

          [JENKINS-10150] [Active Directory] Group authentication problem

          Giorgy S added a comment -

          Debugging this issue I found that the problem was case sensitive in group name.
          My group is "Java Admins" and I was using "JAVA Admins" in group permissions.

          It was wired because the plugin detected the group properly indicating the icon () correctly.

          I can't create a patch to send you because I don't have some libraries necessaries.

          Giorgy S added a comment - Debugging this issue I found that the problem was case sensitive in group name. My group is " Java Admins" and I was using " JAVA Admins" in group permissions. It was wired because the plugin detected the group properly indicating the icon ( ) correctly. I can't create a patch to send you because I don't have some libraries necessaries.

          Kohsuke Kawaguchi added a comment -

          http://yourserver/whoAmI is your friend to figure out groups that you are in.

          It sounds like the problem is the incorrectly allowing "JAVA Admins" to go through while it should have been "Java Admins"?

          Kohsuke Kawaguchi added a comment - http://yourserver/whoAmI is your friend to figure out groups that you are in. It sounds like the problem is the incorrectly allowing "JAVA Admins" to go through while it should have been "Java Admins"?

          Kohsuke Kawaguchi added a comment -

          No further input from the repoter. Marking as closed.

          According to the last comment, this ticket is probably superceded with JENKINS-17674

          Kohsuke Kawaguchi added a comment - No further input from the repoter. Marking as closed. According to the last comment, this ticket is probably superceded with JENKINS-17674

          F M added a comment -

          Solution:
          Using AD groups is case sensitive. Make sure you use the proper case!

          F M added a comment - Solution: Using AD groups is case sensitive. Make sure you use the proper case!

            Unassigned Unassigned
            giorgy Giorgy S
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: