Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-15596

Jenkins will not start as a Windows Service after KB2661254

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Major Major
    • core
    • Windows Server 2008 R2, JDK 1.6.0_35, Jenkins 486 installed

      Jenkins will no longer start as a Windows Service after windows patch KB2661254 is installed. When trying to the start Jenkins as a service, the following error is received "Error 1053: The service did not respond to the start or control request in a timely fashion.". No logging is captured in any of the Jenkins logs and the Windows Event screen shows the same error as listed above.

          [JENKINS-15596] Jenkins will not start as a Windows Service after KB2661254

          Is there any workaround to deal with this bug?

          Adilson Junior added a comment - Is there any workaround to deal with this bug?

          Dirk Kuypers added a comment -

          Try to add the following file as jenkins-slave.exe.config to your slave directory:

          <?xml version="1.0" encoding="utf-8"?>
          <configuration>
          <runtime>
          <generatePublisherEvidence enabled="false"/>
          </runtime>
          </configuration>

          It disables checking the validity of the Exes signature. At least it helped me as our corporate firewall blocks this sort of checks...

          Dirk Kuypers added a comment - Try to add the following file as jenkins-slave.exe.config to your slave directory: <?xml version="1.0" encoding="utf-8"?> <configuration> <runtime> <generatePublisherEvidence enabled="false"/> </runtime> </configuration> It disables checking the validity of the Exes signature. At least it helped me as our corporate firewall blocks this sort of checks...

          Hi Dirk Kuypers.
          I'm not using jenkins slave. I'm using only primary and trying to use as a Windows Service.
          If I run from command line, it works fine. But if I try to use as a Windows Service, the service does not start.

          Adilson Junior added a comment - Hi Dirk Kuypers. I'm not using jenkins slave. I'm using only primary and trying to use as a Windows Service. If I run from command line, it works fine. But if I try to use as a Windows Service, the service does not start.

          Dirk Kuypers added a comment -

          The same works for me for Jenkins as service, just place the file as jenkins.exe.config into the directory of your jenkins.exe.

          Dirk Kuypers added a comment - The same works for me for Jenkins as service, just place the file as jenkins.exe.config into the directory of your jenkins.exe.

          Code changed in jenkins
          User: Kohsuke Kawaguchi
          Path:
          changelog.html
          core/src/main/java/hudson/lifecycle/WindowsInstallerLink.java
          core/src/main/java/hudson/lifecycle/WindowsServiceLifecycle.java
          core/src/main/java/hudson/os/windows/ManagedWindowsServiceLauncher.java
          core/src/main/resources/windows-service/jenkins.exe.config
          msi/build.sh
          msi/jenkins.wxs
          http://jenkins-ci.org/commit/jenkins/b05d449f20c59ff858a9aca6e2dcf76b83fe3182
          Log:
          [FIXED JENKINS-15596]

          Disable authenticode verification on jenkins.exe and jenkins-slave.exe
          by generating a proper application configuration file.

          See: http://msdn.microsoft.com/en-us/library/cc656914.aspx
          See: http://msdn.microsoft.com/en-us/library/bb629393.aspx
          See: http://support.microsoft.com/kb/936707


          You received this message because you are subscribed to the Google Groups "Jenkins Commits" group.
          To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-commits+unsubscribe@googlegroups.com.
          For more options, visit https://groups.google.com/groups/opt_out.

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Kohsuke Kawaguchi Path: changelog.html core/src/main/java/hudson/lifecycle/WindowsInstallerLink.java core/src/main/java/hudson/lifecycle/WindowsServiceLifecycle.java core/src/main/java/hudson/os/windows/ManagedWindowsServiceLauncher.java core/src/main/resources/windows-service/jenkins.exe.config msi/build.sh msi/jenkins.wxs http://jenkins-ci.org/commit/jenkins/b05d449f20c59ff858a9aca6e2dcf76b83fe3182 Log: [FIXED JENKINS-15596] Disable authenticode verification on jenkins.exe and jenkins-slave.exe by generating a proper application configuration file. See: http://msdn.microsoft.com/en-us/library/cc656914.aspx See: http://msdn.microsoft.com/en-us/library/bb629393.aspx See: http://support.microsoft.com/kb/936707 – You received this message because you are subscribed to the Google Groups "Jenkins Commits" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-commits+unsubscribe@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out .

          Code changed in jenkins
          User: Kohsuke Kawaguchi
          Path:
          src/main/java/org/jenkinsci/modules/windows_slave_installer/WindowsSlaveInstaller.java
          src/main/resources/org/jenkinsci/modules/windows_slave_installer/jenkins-slave.exe.config
          http://jenkins-ci.org/commit/windows-slave-installer-module/5170ede0e284be7019626731f8c0ad96f9ad73d9
          Log:
          JENKINS-15596

          Skip authenticode verification

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Kohsuke Kawaguchi Path: src/main/java/org/jenkinsci/modules/windows_slave_installer/WindowsSlaveInstaller.java src/main/resources/org/jenkinsci/modules/windows_slave_installer/jenkins-slave.exe.config http://jenkins-ci.org/commit/windows-slave-installer-module/5170ede0e284be7019626731f8c0ad96f9ad73d9 Log: JENKINS-15596 Skip authenticode verification

          Code changed in jenkins
          User: Kohsuke Kawaguchi
          Path:
          changelog.html
          core/src/main/java/hudson/lifecycle/WindowsInstallerLink.java
          core/src/main/java/hudson/lifecycle/WindowsServiceLifecycle.java
          core/src/main/java/hudson/os/windows/ManagedWindowsServiceLauncher.java
          core/src/main/resources/windows-service/jenkins.exe.config
          msi/build.sh
          msi/jenkins.wxs
          war/pom.xml
          http://jenkins-ci.org/commit/jenkins/934e9d336b7fb1fb41506fdd525ac98acbf91240
          Log:
          [FIXED JENKINS-15596]

          Disable authenticode verification on jenkins.exe and jenkins-slave.exe
          by generating a proper application configuration file.

          See: http://msdn.microsoft.com/en-us/library/cc656914.aspx
          See: http://msdn.microsoft.com/en-us/library/bb629393.aspx
          See: http://support.microsoft.com/kb/936707


          You received this message because you are subscribed to the Google Groups "Jenkins Commits" group.
          To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-commits+unsubscribe@googlegroups.com.
          For more options, visit https://groups.google.com/groups/opt_out.

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Kohsuke Kawaguchi Path: changelog.html core/src/main/java/hudson/lifecycle/WindowsInstallerLink.java core/src/main/java/hudson/lifecycle/WindowsServiceLifecycle.java core/src/main/java/hudson/os/windows/ManagedWindowsServiceLauncher.java core/src/main/resources/windows-service/jenkins.exe.config msi/build.sh msi/jenkins.wxs war/pom.xml http://jenkins-ci.org/commit/jenkins/934e9d336b7fb1fb41506fdd525ac98acbf91240 Log: [FIXED JENKINS-15596] Disable authenticode verification on jenkins.exe and jenkins-slave.exe by generating a proper application configuration file. See: http://msdn.microsoft.com/en-us/library/cc656914.aspx See: http://msdn.microsoft.com/en-us/library/bb629393.aspx See: http://support.microsoft.com/kb/936707 – You received this message because you are subscribed to the Google Groups "Jenkins Commits" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-commits+unsubscribe@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out .

          dogfood added a comment -

          Integrated in jenkins_main_trunk #2325
          [FIXED JENKINS-15596] (Revision 934e9d336b7fb1fb41506fdd525ac98acbf91240)

          Result = UNSTABLE
          kohsuke : 934e9d336b7fb1fb41506fdd525ac98acbf91240
          Files :

          • core/src/main/java/hudson/lifecycle/WindowsServiceLifecycle.java
          • core/src/main/java/hudson/lifecycle/WindowsInstallerLink.java
          • changelog.html
          • war/pom.xml
          • msi/build.sh
          • msi/jenkins.wxs
          • core/src/main/java/hudson/os/windows/ManagedWindowsServiceLauncher.java
          • core/src/main/resources/windows-service/jenkins.exe.config

          dogfood added a comment - Integrated in jenkins_main_trunk #2325 [FIXED JENKINS-15596] (Revision 934e9d336b7fb1fb41506fdd525ac98acbf91240) Result = UNSTABLE kohsuke : 934e9d336b7fb1fb41506fdd525ac98acbf91240 Files : core/src/main/java/hudson/lifecycle/WindowsServiceLifecycle.java core/src/main/java/hudson/lifecycle/WindowsInstallerLink.java changelog.html war/pom.xml msi/build.sh msi/jenkins.wxs core/src/main/java/hudson/os/windows/ManagedWindowsServiceLauncher.java core/src/main/resources/windows-service/jenkins.exe.config

          Linards L added a comment - - edited

          Not affected by this issue on my win 2k8 r2 x64 sp1 (jdk7) machine though even after upgrade from v1.502 to v1.504 with having this KB2661254 installed.

          Linards L added a comment - - edited Not affected by this issue on my win 2k8 r2 x64 sp1 (jdk7) machine though even after upgrade from v1.502 to v1.504 with having this KB2661254 installed.

          Placing jenkins-slave.exe.config next to my jenkins-slave.exe solved the service cannot be start using DCOM problem. However, I have 5 windows slaves, only one of them suffered from the KB2551254 problem.

          Pei-Tang Huang added a comment - Placing jenkins-slave.exe.config next to my jenkins-slave.exe solved the service cannot be start using DCOM problem. However, I have 5 windows slaves, only one of them suffered from the KB2551254 problem.

            Unassigned Unassigned
            rkoretke Richard Koretke
            Votes:
            2 Vote for this issue
            Watchers:
            9 Start watching this issue

              Created:
              Updated:
              Resolved: