Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-44531

Bind passwd in AD setting changed when saving Matrix-based security setting

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • Jenkins version 2.7.4
      AD plugin version: 2.4
      Matrix Authorization Strategy Plugin: 1.5
      Google Chrome Browser

      1. We upgraded plugins to latest versions as mentioned in Environment.
      2. After plugins upgrade, in the configureSecurity page, we unchecked "Overall/RunScript" permission for the user( actually a service account which is also used as Bind DN )
      3. Pushed on Save to save to configuration.
      4. After saving the configuration, We could not login to Jenkins as the Bind DN account got locked.
      5. when we investigate the cause of account lock,  the Bind Password got changed when saving the "Overall/RunScript" permission change.

      We have not modified anything on AD setting, however the Bind password changed when saving the  Matrix-based security setting.

      Note: The account used in Matrix-based security setting and AD setting for Bind DN is same.

      We are not sure how the  Matrix-based security setting change affect Bind password change.

      If you have some idea/information on the root cause of the issue, could you please share it with us?

       

       

          [JENKINS-44531] Bind passwd in AD setting changed when saving Matrix-based security setting

          Hanumanth Rao added a comment -

          We could see similar issue as our case...

          https://issues.jenkins-ci.org/browse/JENKINS-29280

          Hanumanth Rao added a comment - We could see similar issue as our case... https://issues.jenkins-ci.org/browse/JENKINS-29280

          Eric Mooney added a comment -

          For me the password breaks anytime you open the configure security page and click save. It doesn't matter if you change anything on the page or not. 

          Eric Mooney added a comment - For me the password breaks anytime you open the configure security page and click save. It doesn't matter if you change anything on the page or not. 

            fbelzunc FĂ©lix Belzunce Arcos
            hanumanth9 Hanumanth Rao
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: