Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-28857

"Automatic" group lookup strategy is not so automatic

    XMLWordPrintable

Details

    Description

      com.sun.jndi.ldap.Connection.readReply() apparently times out after 15secs with an error like this:

      Caused by: javax.naming.NamingException: LDAP response read timed out, timeout used:-1ms.; remaining name 'DC=example,DC=com'
          at com.sun.jndi.ldap.Connection.readReply(Unknown Source)
          at com.sun.jndi.ldap.LdapClient.getSearchReply(Unknown Source)
          at com.sun.jndi.ldap.LdapClient.search(Unknown Source)
          at com.sun.jndi.ldap.LdapCtx.doSearch(Unknown Source)
          at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source)
          at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)
          at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)
          at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source)
          at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
          at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
          at hudson.plugins.active_directory.LDAPSearchBuilder.search(LDAPSearchBuilder.java:97)
          at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.chainGroupLookup(ActiveDirectoryUnixAuthenticationProvider.java:469)
          at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:453)
          at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:318)
          ... 44 more
      

      Note that the source code (or that of JDK7) doesn't explain why one would ever get this error message. if readTimeout<0, then waited shall never be true.

      But this is reported as JDK-8062947, and another person sees it too.

      The automatic mode should catch NamingException, check time out, and should fall back to the recursive lookup.

      Attachments

        Issue Links

          Activity

            kohsuke Kohsuke Kawaguchi created issue -
            fbelzunc Félix Belzunce Arcos made changes -
            Field Original Value New Value
            Status Open [ 1 ] In Progress [ 3 ]
            fbelzunc Félix Belzunce Arcos made changes -
            Assignee Félix Belzunce Arcos [ fbelzunc ]
            fbelzunc Félix Belzunce Arcos made changes -
            Link This issue is duplicated by JENKINS-33213 [ JENKINS-33213 ]
            scm_issue_link SCM/JIRA link daemon made changes -
            Resolution Fixed [ 1 ]
            Status In Progress [ 3 ] Resolved [ 5 ]
            rtyler R. Tyler Croy made changes -
            Workflow JNJira [ 163721 ] JNJira + In-Review [ 197287 ]

            People

              fbelzunc Félix Belzunce Arcos
              kohsuke Kohsuke Kawaguchi
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: