Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-3590

Hudson build-in user management creates a user for each failed login

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Major Major
    • other
    • None
    • Platform: All, OS: Windows XP

      i'm using the build-in user management from hudson. Every user can do everything
      when he is logged in. If somebody enters a username that does not exists the
      login fails as expected. However this user gets added on the user list an can
      only be deleted by restarting hudson (so i'm guessing hudson holds him in the
      memory)

          [JENKINS-3590] Hudson build-in user management creates a user for each failed login

          Alan Harder added a comment -

          started

          Alan Harder added a comment - started

          Code changed in hudson
          User: : mindless
          Path:
          trunk/hudson/main/core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java
          http://fisheye4.cenqua.com/changelog/hudson/?cs=19411
          Log:
          [FIXED JENKINS-3590] don't create new in-memory user when someone attempts
          login with invalid username

          SCM/JIRA link daemon added a comment - Code changed in hudson User: : mindless Path: trunk/hudson/main/core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java http://fisheye4.cenqua.com/changelog/hudson/?cs=19411 Log: [FIXED JENKINS-3590] don't create new in-memory user when someone attempts login with invalid username

          Code changed in hudson
          User: : mindless
          Path:
          trunk/hudson/main/core/src/main/java/hudson/model/User.java
          http://fisheye4.cenqua.com/changelog/hudson/?cs=19412
          Log:
          JENKINS-3590 load user when create flag is false if user has a config file
          (this should not be considered "creating" the user), so login works even if
          User.getAll has not yet been called. fixes regression from r19411

          SCM/JIRA link daemon added a comment - Code changed in hudson User: : mindless Path: trunk/hudson/main/core/src/main/java/hudson/model/User.java http://fisheye4.cenqua.com/changelog/hudson/?cs=19412 Log: JENKINS-3590 load user when create flag is false if user has a config file (this should not be considered "creating" the user), so login works even if User.getAll has not yet been called. fixes regression from r19411

            mindless Alan Harder
            kukudas kukudas
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved: