LDAP Plugin with 'Dn inconsistent' message using ActiveDirectory

This issue is archived. You can view it, but you can't modify it. Learn more

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: Minor
    • Component/s: ldap-plugin
    • Environment:
      Jenkins: 2.277.1
      OS: Windows Server 2016 - 10.0
      Tomcat 8.5
      ActiveDirectory
      ---
      ldap:2.4
    • ldap 2.10.1

      We are using the LDAP plugin to authenticate the users against MS Active Directory.

      If I test the LDAP settings we get this warning message (see also the picture: Dn_inconsistent_example.png):

      Dn inconsistent (login cn=User Xyz,ou=Employees,ou=Example AG,dc=example,dc=com versus lookup CN=User Xyz,OU=Employees,OU=Example AG,DC=example,DC=com)
      

      In your code I saw you just string compare the both 'inputs'. Is it important for other LDAP backends (like OpenLDAP) to do this check case sensitive? Is "DC=", "OU=" and so on case sensitive? I don't know the details here.

      What are the implications for running Jenkins when I get such a message?

            Assignee:
            James Nord
            Reporter:
            Klaus
            Archiver:
            Jenkins Service Account

              Created:
              Updated:
              Resolved:
              Archived: