Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-18009

Issue getting user ID and resolving permissions

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      we recently moved from LDAP to Crowd authentication via Crowd2 plugin.

      we are experiencing an issue with a internal custom plugin which check users permissions before executing.

      we retrieve build user via

      Cause.UserIdCause mycause = (Cause.UserIdCause)build.getCause(Cause.UserIdCause.class);
      variables.put("BUILD_USERID", mycause.getUserId());
      variables.put("BUILD_USERNAME", mycause.getUserName());
      

      Both variables seems to return the same value, which is

      Name Surname (name.surname)

      while we expect at least one of the two to be simply

      name.surname

      so that it could be passed to

      UserDetails ud = Jenkins.getInstance().getSecurityRealm().loadUserByUsername(build_user);
      

      With current values, the method is failing since the id is not correctly recognized and Crowd group membership not correctly resolved causing the error:

      ERROR: Processing failed due to a bug in the code. Please report this to jenkinsci-users@googlegroups.com
      org.springframework.dao.DataRetrievalFailureException: The user 'Name Surname (name.surname)' does not have the permission to login and/or is not a member of the following user group(s) in your Crowd server: 'Jenkins-build-user'
      at de.theit.jenkins.crowd.CrowdUserDetailsService.loadUserByUsername(CrowdUserDetailsService.java:94)
      at de.theit.jenkins.crowd.CrowdSecurityRealm.loadUserByUsername(CrowdSecurityRealm.java:281)
      at com.buongiorno.jenkinsci.plugins.delivery.ScriptBuildWrapper.setUp(ScriptBuildWrapper.java:95)
      at hudson.maven.MavenModuleSetBuild$MavenModuleSetBuildExecution.doRun(MavenModuleSetBuild.java:600)
      at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:584)
      at hudson.model.Run.execute(Run.java:1575)
      at hudson.maven.MavenModuleSetBuild.run(MavenModuleSetBuild.java:477)
      at hudson.model.ResourceController.execute(ResourceController.java:88)
      at hudson.model.Executor.run(Executor.java:237)

        Attachments

          Issue Links

            Activity

            Hide
            integer Kanstantsin Shautsou added a comment -

            I think user name is fixed in current master, i will reply when new version released.

            Show
            integer Kanstantsin Shautsou added a comment - I think user name is fixed in current master, i will reply when new version released.
            Hide
            integer Kanstantsin Shautsou added a comment -

            I think it was fixed in 1.6

            Show
            integer Kanstantsin Shautsou added a comment - I think it was fixed in 1.6

              People

              Assignee:
              integer Kanstantsin Shautsou
              Reporter:
              msacchetti Michele Sacchetti
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: