Hi,

       

      If a user has a very old passwordhash defined in users/foo_xx/config.xml the new LTS release may lock the user out of jenkins.

       

      This happened with my admin user (setup arund 2012).I spent > 1 day figuring this out and ruling out a security incident and would greatly appreciate that this was mentioned in the releasnotes of 2.277. I upgraded from 2.268.

       

       

          [JENKINS-65107] The new LTS release may lock out old users

          Tarjei created issue -
          Daniel Beck made changes -
          Labels New: regression
          Daniel Beck made changes -
          Priority Original: Minor [ 4 ] New: Critical [ 2 ]
          Mark Waite made changes -
          Labels Original: regression New: JEP-227 regression
          Mark Waite made changes -
          Status Original: Open [ 1 ] New: In Progress [ 3 ]
          Mark Waite made changes -
          Status Original: In Progress [ 3 ] New: In Review [ 10005 ]
          Mark Waite made changes -
          Remote Link New: This issue links to "PR-4242 - Update 2.277.1 upgrade guide to describe the issue (Web Link)" [ 26617 ]
          Mark Waite made changes -
          Resolution New: Fixed [ 1 ]
          Status Original: In Review [ 10005 ] New: Closed [ 6 ]
          Daniel Beck made changes -
          Resolution Original: Fixed [ 1 ]
          Status Original: Closed [ 6 ] New: Reopened [ 4 ]
          Daniel Beck made changes -
          Resolution New: Won't Fix [ 2 ]
          Status Original: Reopened [ 4 ] New: Closed [ 6 ]
          Jesse Glick made changes -
          Link New: This issue is duplicated by JENKINS-64573 [ JENKINS-64573 ]

            Unassigned Unassigned
            tarjei_asku Tarjei
            Votes:
            1 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: