-
Improvement
-
Resolution: Fixed
-
Major
-
None
-
Platform: All, OS: All
Currently slaves do not authenticate to a hudson master, so in order to set up a master/slave build
cluster, the anonymous user must be granted at least "read" access to Hudson so that the slaves can
connect to the master. If anonymous has no permissions, then the slaves are unable to connect at all –
the master shows them as being offline, and on the slave, a 403 permission denied error is shown when
running the JNLP launcher.
For a public-facing hudson, this is a large security risk, as it means opening up the site to anonymous
users for read access simply so that the build slaves can run their jobs. It would be ideal if there was
some way to have the slaves authenticate as a certain user to the master – perhaps the authentication
information could be specified in the slave's configuration XML file?
- duplicates
-
JENKINS-4071 jnlp slaves doesn't support HTTP Auth
- Closed
- is duplicated by
-
JENKINS-3734 Can't launch Windows slave via JNLP when Hudson authentication enabled
- Resolved
-
JENKINS-6278 Problem with security to start slave-agent with JNLP at WindowsXP.
- Closed