• Type: Bug
• Resolution: Unresolved
• Priority: Major
• Component/s: ldap-plugin
• Labels:

  None

1. ldap-plugin.conf

   0.9 kB

   2017-02-10 04:01

2. test.groovy

   0.3 kB

   2017-02-10 03:58

3. 0001-Fix-bug-basic-authentication-can-t-work-with-group-m.patch

   4 kB

   2017-02-10 03:57

[JENKINS-41914] Basic authentication with group membership strategy and FreeIPA

Toan Pham created issue - 2017-02-10 03:57

Toan Pham made changes - 2017-02-10 03:57

Attachment

New: 0001-Fix-bug-basic-authentication-can-t-work-with-group-m.patch [ 35871 ]

Toan Pham made changes - 2017-02-10 03:58

Description

Original: We use kerberos-sso, ldap plugin, and role strategy for authentication and authorization. A freeipa is configured as ldap server. Authorization work well with kerberos login. However, with basic authentication, ldap plugin doesn't return indirect groups of user for authorization. Attached files: test.groovy: script for check return authorities of login 0001-Fix-bug-basic-authentication-can-t-work-with-group-m.patch: a temporary solution

New: We use kerberos-sso, ldap plugin, and role strategy for authentication and authorization. A freeipa is configured as ldap server. Authorization work well with kerberos login. However, with basic authentication, ldap plugin doesn't return indirect groups of user for authorization.  [^0001-Fix-bug-basic-authentication-can-t-work-with-group-m.patch] Attached files: test.groovy: script for check return authorities of login 0001-Fix-bug-basic-authentication-can-t-work-with-group-m.patch: a temporary solution

Toan Pham made changes - 2017-02-10 03:58

Attachment

New: test.groovy [ 35872 ]

Toan Pham made changes - 2017-02-10 04:01

Attachment

New: ldap-plugin.conf [ 35873 ]

Toan Pham made changes - 2017-02-10 04:02

Description

Original: We use kerberos-sso, ldap plugin, and role strategy for authentication and authorization. A freeipa is configured as ldap server. Authorization work well with kerberos login. However, with basic authentication, ldap plugin doesn't return indirect groups of user for authorization.  [^0001-Fix-bug-basic-authentication-can-t-work-with-group-m.patch] Attached files: test.groovy: script for check return authorities of login 0001-Fix-bug-basic-authentication-can-t-work-with-group-m.patch: a temporary solution

New: We use kerberos-sso, ldap plugin, and role strategy for authentication and authorization. A freeipa is configured as ldap server. And [^ldap-plugin.conf] Authorization work well with kerberos login. However, with basic authentication, ldap plugin doesn't return indirect groups of user for authorization. Attached files: test.groovy: script for check return authorities of login ldap-plugin.conf: a part of ldap plugin config 0001-Fix-bug-basic-authentication-can-t-work-with-group-m.patch: a temporary solution

Toan Pham made changes - 2017-02-10 04:06

Description

Original: We use kerberos-sso, ldap plugin, and role strategy for authentication and authorization. A freeipa is configured as ldap server. And [^ldap-plugin.conf] Authorization work well with kerberos login. However, with basic authentication, ldap plugin doesn't return indirect groups of user for authorization. Attached files: test.groovy: script for check return authorities of login ldap-plugin.conf: a part of ldap plugin config 0001-Fix-bug-basic-authentication-can-t-work-with-group-m.patch: a temporary solution

New: We use kerberos-sso, ldap plugin, and role strategy for authentication and authorization. A freeipa is configured as ldap server. Authorization work well with kerberos login. However, with basic authentication, ldap plugin doesn't return indirect groups of user for authorization. Attached files: test.groovy: script for check return authorities of login ldap-plugin.conf: a part of ldap plugin config 0001-Fix-bug-basic-authentication-can-t-work-with-group-m.patch: a temporary solution

Markus Winter made changes - 2022-07-21 15:45

Component/s

Original: role-strategy-plugin [ 15758 ]

Oliver Gondža made changes - 2023-11-21 12:18

Component/s

Original: kerberos-sso-plugin [ 21725 ]