Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-16844

Triggering a build from the context menu produces a warning when security is enabled

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Major Major
    • core
    • Jenkins 1.480.3 (Winstone and Tomcat)
      LDAP plugin 1.1 and 1.2

      Hovering mouse over a job name brings up a context menu. Clicking Build Now from the context menu produces the following warning and a Proceed button. Build starts only if Proceed button is pressed. Context menu is accessible at least in job list view (e.g. default All view) and from the breadcrumb. Clicking Build Now on the left menu on a job page works normally, i.e. without warnings.

      You must use POST method to trigger builds. (From scripts you may instead pass a per-project authentication token, or authenticate with your API token.) If you see this page, it may be because a plugin offered a GET link; file a bug report for that plugin.

          [JENKINS-16844] Triggering a build from the context menu produces a warning when security is enabled

          Sami Salonen created issue -
          Sami Salonen made changes -
          Component/s New: ldap [ 17122 ]
          Component/s Original: core [ 15593 ]

          Sami Salonen added a comment - - edited

          Steps to reproduce:

          1. Start Jenkins (java -jar jenkins.war)
          2. Create a free-style project (just give a name, default configuration is fine)
          3. Trigger a build from a context menu. Works fine.
          4. Add directory server based authentication:
            1. Click Enable security in global configuration
            2. From Access Control section, select LDAP under Security Realm
            3. Fill in Server, root DN, User search base, User search filter, Group search base, Manager DN, Manager Password
            4. (For Authorization, I tried both Anyone can do anything and Matrix-based security with same effect)
          5. Trigger a build from a context menu. Warning message is displayed.

          Sami Salonen added a comment - - edited Steps to reproduce: Start Jenkins ( java -jar jenkins.war ) Create a free-style project (just give a name, default configuration is fine) Trigger a build from a context menu. Works fine. Add directory server based authentication: Click Enable security in global configuration From Access Control section, select LDAP under Security Realm Fill in Server, root DN, User search base, User search filter, Group search base, Manager DN, Manager Password (For Authorization, I tried both Anyone can do anything and Matrix-based security with same effect) Trigger a build from a context menu. Warning message is displayed.
          Sami Salonen made changes -
          Environment Original: Jenkins 1.480.3 (Winstone and Tomcat) New: Jenkins 1.480.3 (Winstone and Tomcat)
          LDAP plugin 1.1 and 1.2
          Sami Salonen made changes -
          Component/s New: core [ 15593 ]
          Component/s New: security [ 15508 ]
          Description Original: Hovering mouse over a job name brings up a context menu. Clicking Build Now from the context menu produces the following warning and a Proceed button. Build starts only if Proceed button is pressed. Context menu is accessible at least in job list view (e.g. default All view) and from the breadcrumb. Clicking Build Now on the left menu on a job page works normally.

          {{You must use POST method to trigger builds. (From scripts you may instead pass a per-project authentication token, or authenticate with your API token.) If you see this page, it may be because a plugin offered a GET link; file a bug report for that plugin.}}
          New: Hovering mouse over a job name brings up a context menu. Clicking _Build Now_ from the context menu produces the following warning and a _Proceed_ button. Build starts only if _Proceed_ button is pressed. Context menu is accessible at least in job list view (e.g. default _All_ view) and from the breadcrumb. Clicking _Build Now_ on the left menu on a job page works normally, i.e. without warnings.

          {{You must use POST method to trigger builds. (From scripts you may instead pass a per-project authentication token, or authenticate with your API token.) If you see this page, it may be because a plugin offered a GET link; file a bug report for that plugin.}}
          Summary Original: Triggering a build from the context menu produces a warning New: Triggering a build from the context menu produces a warning when security is enabled
          Sami Salonen made changes -
          Component/s New: gui [ 15492 ]

          Balthasar Nebel added a comment - - edited

          I am having the same problem with Jenkins 1.502 on Linux (Oracle JDK 1.6.0_39). For some unknown reason not all my jobs are having this problem. The problem disappeared after going back to Jenkins 1.501.

          Balthasar Nebel added a comment - - edited I am having the same problem with Jenkins 1.502 on Linux (Oracle JDK 1.6.0_39). For some unknown reason not all my jobs are having this problem. The problem disappeared after going back to Jenkins 1.501.

          Same on here, updating to 1.502 from 1.501 makes this warning also visible.

          I have repository hooks that trigger the following url:

          curl https://ci.mysite.com/job/myjob/build?token=MY_TOKEN

          and this action is not performed due to the warning getting displayed

          Antonios Chalkiopoulos added a comment - Same on here, updating to 1.502 from 1.501 makes this warning also visible. I have repository hooks that trigger the following url: curl https://ci.mysite.com/job/myjob/build?token=MY_TOKEN and this action is not performed due to the warning getting displayed
          Jesse Glick made changes -
          Assignee New: Jesse Glick [ jglick ]

          Jesse Glick added a comment -

          Known; will provide a fix in trunk soon. Workaround is simply: just click Proceed.

          Jesse Glick added a comment - Known; will provide a fix in trunk soon. Workaround is simply: just click Proceed.
          Jesse Glick made changes -
          Link New: This issue is blocking SECURITY-13 [ SECURITY-13 ]

            jglick Jesse Glick
            salsa Sami Salonen
            Votes:
            2 Vote for this issue
            Watchers:
            12 Start watching this issue

              Created:
              Updated:
              Resolved: