Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-15578

hudson.security.AccessDeniedException2: anonymous is missing the Administer permission

      I have my Jenkins installation configured to require LDAP logins and only certain users are administrators and the rest just have read only rights. When restarting Jenkins after installing the ios-device-connector plugin, all my slaves fail to connect with the following:

      ERROR: Unexpected error in launching a slave. This is probably a bug in Jenkins.
      hudson.security.AccessDeniedException2: anonymous is missing the Administer permission
              at hudson.security.ACL.checkPermission(ACL.java:54)
              at hudson.model.Node.checkPermission(Node.java:393)
              at org.jenkinsci.plugins.ios.connector.iOSDeviceList.update(iOSDeviceList.java:91)
              at org.jenkinsci.plugins.ios.connector.ComputerListenerImpl.onOnline(ComputerListenerImpl.java:21)
              at hudson.slaves.SlaveComputer.setChannel(SlaveComputer.java:396)
              at hudson.slaves.SlaveComputer.setChannel(SlaveComputer.java:317)
              at hudson.plugins.sshslaves.SSHLauncher.startSlave(SSHLauncher.java:454)
              at hudson.plugins.sshslaves.SSHLauncher.launch(SSHLauncher.java:293)
              at hudson.slaves.SlaveComputer$1.call(SlaveComputer.java:200)
              at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
              at java.util.concurrent.FutureTask.run(FutureTask.java:166)
              at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)
              at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)
              at java.lang.Thread.run(Thread.java:679)
      

      If I allow all users administrator access, then the slaves reconnect correctly and I can see the iOS device status.

          [JENKINS-15578] hudson.security.AccessDeniedException2: anonymous is missing the Administer permission

          Fred G added a comment -

          This problem is not limited to LDAP authentication.
          I'm getting almost the same error, with "Jenkins's own user database":

          hudson.security.AccessDeniedException2: anonymous is missing the {1} permission
          

          Fred G added a comment - This problem is not limited to LDAP authentication. I'm getting almost the same error, with "Jenkins's own user database": hudson.security.AccessDeniedException2: anonymous is missing the {1} permission

          Taras Kalapun added a comment -

          I'm getting also this issue with the Jenkins 1.5+
          Any update or workarounds on it?

          Taras Kalapun added a comment - I'm getting also this issue with the Jenkins 1.5+ Any update or workarounds on it?

          I'm not really clear on how slave permissions should work, so I haven't merged this, but here's a patch:

          https://github.com/jenkinsci/ios-device-connector-plugin/pull/4

          Christopher Orr added a comment - I'm not really clear on how slave permissions should work, so I haven't merged this, but here's a patch: https://github.com/jenkinsci/ios-device-connector-plugin/pull/4

          Joakim Sandström added a comment - - edited

          I'm experiencing the same issue on a pure RedHat environment with Jenkins 1.511, without the ios-device-connector-plugin plugin installed.

          [04/17/13 08:18:57] [SSH] Opening SSH connection to limetti.x:22.
          ERROR: Unexpected error in launching a slave. This is probably a bug in Jenkins.
          hudson.security.AccessDeniedException2: anonymous is missing the Administer permission
          	at hudson.security.ACL.checkPermission(ACL.java:54)
          	at hudson.model.Node.checkPermission(Node.java:394)
          	at com.cloudbees.plugins.credentials.SystemCredentialsProvider.save(SystemCredentialsProvider.java:178)
          	at hudson.plugins.sshslaves.SSHLauncher.upgrade(SSHLauncher.java:407)
          	at hudson.plugins.sshslaves.SSHLauncher.getCredentials(SSHLauncher.java:351)
          	at hudson.plugins.sshslaves.SSHLauncher.openConnection(SSHLauncher.java:907)
          	at hudson.plugins.sshslaves.SSHLauncher.launch(SSHLauncher.java:473)
          	at hudson.slaves.SlaveComputer$1.call(SlaveComputer.java:223)
          	at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
          	at java.util.concurrent.FutureTask.run(FutureTask.java:166)
          	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)
          	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)
          	at java.lang.Thread.run(Thread.java:722)
          [04/17/13 08:18:57] [SSH] Connection closed.
          

          Joakim Sandström added a comment - - edited I'm experiencing the same issue on a pure RedHat environment with Jenkins 1.511, without the ios-device-connector-plugin plugin installed. [04/17/13 08:18:57] [SSH] Opening SSH connection to limetti.x:22. ERROR: Unexpected error in launching a slave. This is probably a bug in Jenkins. hudson.security.AccessDeniedException2: anonymous is missing the Administer permission at hudson.security.ACL.checkPermission(ACL.java:54) at hudson.model.Node.checkPermission(Node.java:394) at com.cloudbees.plugins.credentials.SystemCredentialsProvider.save(SystemCredentialsProvider.java:178) at hudson.plugins.sshslaves.SSHLauncher.upgrade(SSHLauncher.java:407) at hudson.plugins.sshslaves.SSHLauncher.getCredentials(SSHLauncher.java:351) at hudson.plugins.sshslaves.SSHLauncher.openConnection(SSHLauncher.java:907) at hudson.plugins.sshslaves.SSHLauncher.launch(SSHLauncher.java:473) at hudson.slaves.SlaveComputer$1.call(SlaveComputer.java:223) at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334) at java.util.concurrent.FutureTask.run(FutureTask.java:166) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603) at java.lang.Thread.run(Thread.java:722) [04/17/13 08:18:57] [SSH] Connection closed.

          Joakim, that's a similar, but different bug in what looks like the Credentials Plugin.

          Please file a new bug report with that stacktrace against the credentials component.

          Christopher Orr added a comment - Joakim, that's a similar, but different bug in what looks like the Credentials Plugin. Please file a new bug report with that stacktrace against the credentials component.

          After upgrading the SSH Slaves Plugin from version 0.23 to 0.24 I got the same exception, while trying to connect nodes.

          As workaround a downgraded the SSH Slaves Plugin to version 0.23.

          I new ticket describing this problem can be found here: JENKINS-17648

          Johannes Luther added a comment - After upgrading the SSH Slaves Plugin from version 0.23 to 0.24 I got the same exception, while trying to connect nodes. As workaround a downgraded the SSH Slaves Plugin to version 0.23. I new ticket describing this problem can be found here: JENKINS-17648

          I had to disable iOS Device connector plugin.

          Mark Steinberg added a comment - I had to disable iOS Device connector plugin.

          Code changed in jenkins
          User: Kohsuke Kawaguchi
          Path:
          changelog.html
          core/src/main/java/hudson/slaves/SlaveComputer.java
          http://jenkins-ci.org/commit/jenkins/4a71b011613f8e8c5a31b6b4dee66de43aa4f4dc
          Log:
          [FIXED JENKINS-15578]

          The slave launch thread is another background thread, and it should run
          like a super-user

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Kohsuke Kawaguchi Path: changelog.html core/src/main/java/hudson/slaves/SlaveComputer.java http://jenkins-ci.org/commit/jenkins/4a71b011613f8e8c5a31b6b4dee66de43aa4f4dc Log: [FIXED JENKINS-15578] The slave launch thread is another background thread, and it should run like a super-user

          dogfood added a comment -

          Integrated in jenkins_main_trunk #2616
          [FIXED JENKINS-15578] (Revision 4a71b011613f8e8c5a31b6b4dee66de43aa4f4dc)

          Result = SUCCESS
          kohsuke : 4a71b011613f8e8c5a31b6b4dee66de43aa4f4dc
          Files :

          • core/src/main/java/hudson/slaves/SlaveComputer.java
          • changelog.html

          dogfood added a comment - Integrated in jenkins_main_trunk #2616 [FIXED JENKINS-15578] (Revision 4a71b011613f8e8c5a31b6b4dee66de43aa4f4dc) Result = SUCCESS kohsuke : 4a71b011613f8e8c5a31b6b4dee66de43aa4f4dc Files : core/src/main/java/hudson/slaves/SlaveComputer.java changelog.html

          Code changed in jenkins
          User: Kohsuke Kawaguchi
          Path:
          core/src/main/java/hudson/slaves/SlaveComputer.java
          http://jenkins-ci.org/commit/jenkins/a799c7f232f592e3d2b240c7729d458b57ef8fc9
          Log:
          [FIXED JENKINS-15578]

          The slave launch thread is another background thread, and it should run
          like a super-user

          (cherry picked from commit 4a71b011613f8e8c5a31b6b4dee66de43aa4f4dc)

          Conflicts:
          changelog.html

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Kohsuke Kawaguchi Path: core/src/main/java/hudson/slaves/SlaveComputer.java http://jenkins-ci.org/commit/jenkins/a799c7f232f592e3d2b240c7729d458b57ef8fc9 Log: [FIXED JENKINS-15578] The slave launch thread is another background thread, and it should run like a super-user (cherry picked from commit 4a71b011613f8e8c5a31b6b4dee66de43aa4f4dc) Conflicts: changelog.html

            kohsuke Kohsuke Kawaguchi
            craign Craig Newell
            Votes:
            7 Vote for this issue
            Watchers:
            13 Start watching this issue

              Created:
              Updated:
              Resolved: