Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-29162

Jenkins internal user in order to be able to log-in under an authentication failure with LDAP AD, ...

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      Having Jenkins administration completely dependent on the availability of an external LDAP server might be a real problem/risk. Jenkins could be accessible even if LDAP/AD/.. server becomes unavailable.

      Basically, this will try to avoid to configure LDAP in Jenkins only to find out it is not working and then no longer be able to login to Jenkins.

      Maybe this can be done as a plugin.

        Attachments

          Issue Links

            Activity

            Hide
            bjoern_martin Björn Martin added a comment -

            Just voted - specifically for Harry Johnson s proposal: I had the exact same issue while trying to get LDAP working with a test installation.

            Show
            bjoern_martin Björn Martin added a comment - Just voted - specifically for Harry Johnson s proposal: I had the exact same issue while trying to get LDAP working with a test installation.
            Hide
            grueni Andreas Grüninger added a comment -

            Same problem here with Active Directory with Kerberos as external realm.

            If the user could not be found in keberos or sso with kerberos configuration is wrong a fall back to Jenkins’ own user database should be used.

            OpenNMS uses a hybrid security provider with spring security for this approach.

            Show
            grueni Andreas Grüninger added a comment - Same problem here with Active Directory with Kerberos as external realm. If the user could not be found in keberos or sso with kerberos configuration is wrong a fall back to Jenkins’ own user database should be used. OpenNMS uses a hybrid security provider with spring security for this approach.
            Hide
            stefanrink Stefan Rink added a comment -

            I would also need the possibility of fallback to Jenkins' own user database, or at least to a single fallback user (like the AD plugin does). 

            If I implemented this, could I expect the respective pull request to be merged in? Which conditions / coding guidelines would I have to adhere to?

            Show
            stefanrink Stefan Rink added a comment - I would also need the possibility of fallback to Jenkins' own user database, or at least to a single fallback user (like the AD plugin does).  If I implemented this, could I expect the respective pull request to be merged in? Which conditions / coding guidelines would I have to adhere to?
            Hide
            faucherb94 Ben Faucher added a comment -

            I'll add another voice to the pile for this. I need failover to internal specifically for the admin account, and bot accounts for API keys for automation.

            Show
            faucherb94 Ben Faucher added a comment - I'll add another voice to the pile for this. I need failover to internal specifically for the admin account, and bot accounts for API keys for automation.
            Hide
            kdushyant02 Dushyant K added a comment -

            Even we are looking failover realm functionality which help to login via admin account if we have any LDAP authentication user issue/ credential changes. At least we should have admin user login alone with other realm authentication mechanism.
            So I would like know, is there anyone who can help/guideline for above requirements.  

            Show
            kdushyant02 Dushyant K added a comment - Even we are looking failover realm functionality which help to login via admin account if we have any LDAP authentication user issue/ credential changes. At least we should have admin user login alone with other realm authentication mechanism. So I would like know, is there anyone who can help/guideline for above requirements.  

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              fbelzunc Félix Belzunce Arcos
              Votes:
              35 Vote for this issue
              Watchers:
              28 Start watching this issue

                Dates

                Created:
                Updated: