Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-68663

PAM fails with NIS when jenkins not run as root

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Blocker Blocker
    • pam-auth-plugin
    • None
    • Ubuntu 20.04

      NIS users are unable to authenticate unless Jenkins services is started as root:

       

      Jun  1 unix_chkpwd[5063]: check pass; user unknown
      Jun  1 unix_chkpwd[5064]: check pass; user unknown
      Jun  1 unix_chkpwd[5064]: password check failed for user

       

      I have tried adding "jenkins" to group "shadow" and granting read permissions to /etc/shadow for the group but having no luck.  Tried also to downgrade to v1.6 but that didn't help.  We do have it working on a Redhat box when run as "jenkins" with Jenkins v2.204.6.  Do we need to downgrade Jenkins on the Ubuntu box to the older version?

          [JENKINS-68663] PAM fails with NIS when jenkins not run as root

          David Hartje created issue -
          David Hartje made changes -
          Description Original: NIS users are unable to authenticate unless Jenkins services is started as root:

           

          Jun  1 11:00:48 flsm-jenkins01-lxu unix_chkpwd[5063]: check pass; user unknown
          Jun  1 11:00:48 flsm-jenkins01-lxu unix_chkpwd[5064]: check pass; user unknown
          Jun  1 11:00:48 flsm-jenkins01-lxu unix_chkpwd[5064]: password check failed for user

           

          I have tried adding "jenkins" to group "shadow" and granting read permissions to /etc/shadow for the group but having no luck.  Tried also to downgrade to v1.6 but that didn't help.  We do have it working on a Redhat box when run as "jenkins" with Jenkins v2.204.6.  Do we need to downgrade Jenkins on the Ubuntu box to the older version?
          New: NIS users are unable to authenticate unless Jenkins services is started as root:

           

          Jun  1 unix_chkpwd[5063]: check pass; user unknown
          Jun  1 unix_chkpwd[5064]: check pass; user unknown
          Jun  1 unix_chkpwd[5064]: password check failed for user

           

          I have tried adding "jenkins" to group "shadow" and granting read permissions to /etc/shadow for the group but having no luck.  Tried also to downgrade to v1.6 but that didn't help.  We do have it working on a Redhat box when run as "jenkins" with Jenkins v2.204.6.  Do we need to downgrade Jenkins on the Ubuntu box to the older version?
          David Hartje made changes -
          Assignee Original: Matt Sicker [ jvz ] New: Mark Waite [ markewaite ]
          Mark Waite made changes -
          Assignee Original: Mark Waite [ markewaite ]

            Unassigned Unassigned
            davidhartje David Hartje
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: