Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-68947

Active Directory plugin fails on Java 17 with IllegalAccessError: "module java.naming does not export com.sun.jndi.ldap to unnamed module"

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Major Major
    • None
    • Official image jenkins/jenkins:2.346.1-lts-jdk17
    • 2.27

      Simply when clicking test connection I'm getting:

      2022-07-06 18:34:33.461+0000 [id=20]    WARNING h.i.i.InstallUncaughtExceptionHandler#handleException: Caught unhandled exception with ID 6d50331d-f504-45a0-80ee-78b906a34772
      java.lang.IllegalAccessError: class hudson.plugins.active_directory.ActiveDirectorySecurityRealm$DescriptorImpl (in unnamed module @0x781dfb3b) cannot access class com.sun.jndi.ldap.LdapCtxFactory (in module java.naming) because module java.naming does not export com.sun.jndi.ldap to unnamed module @0x781dfb3b
              at hudson.plugins.active_directory.ActiveDirectorySecurityRealm$DescriptorImpl.bind(ActiveDirectorySecurityRealm.java:670)
              at hudson.plugins.active_directory.ActiveDirectorySecurityRealm$DescriptorImpl.bind(ActiveDirectorySecurityRealm.java:601)
              at hudson.plugins.active_directory.ActiveDirectorySecurityRealm$DescriptorImpl.bind(ActiveDirectorySecurityRealm.java:566)
              at hudson.plugins.active_directory.ActiveDirectoryDomain$DescriptorImpl.doValidateTest(ActiveDirectoryDomain.java:337)
              at java.base/java.lang.invoke.MethodHandle.invokeWithArguments(MethodHandle.java:732)
      ...
      

      Workaround:
      Add --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED to JAVA_OPTS environment variable.

          [JENKINS-68947] Active Directory plugin fails on Java 17 with IllegalAccessError: "module java.naming does not export com.sun.jndi.ldap to unnamed module"

          Jim Klimov added a comment -

          FWIW, still a problem "out of the box" with LTS 2.346.2, started with JDK17 on CentOS (/usr/lib/jvm/java-17-openjdk-17.0.3.0.7-2.el8_6.x86_64):

          ````

          Jul 20 22:48:31 pvysjenkins jenkins[1450283]: java.lang.IllegalAccessError: class hudson.plugins.active_directory.ActiveDirectorySecurityRealm$DescriptorImpl (in unnamed module @0x78f0bc88) cannot access class com.sun.jndi.ldap.LdapCtxFactory (in module java.naming) because module java.naming does not export com.sun.jndi.ldap to unnamed module @0x78f0bc88
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.plugins.active_directory.ActiveDirectorySecurityRealm$DescriptorImpl.bind(ActiveDirectorySecurityRealm.java:670)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.plugins.active_directory.ActiveDirectorySecurityRealm$DescriptorImpl.bind(ActiveDirectorySecurityRealm.java:601)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.plugins.active_directory.ActiveDirectorySecurityRealm$DescriptorImpl.bind(ActiveDirectorySecurityRealm.java:566)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.lambda$retrieveUser$0(ActiveDirectoryUnixAuthenticationProvider.java:368)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at com.github.benmanes.caffeine.cache.BoundedLocalCache.lambda$doComputeIfAbsent$14(BoundedLocalCache.java:2406)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at java.base/java.util.concurrent.ConcurrentHashMap.compute(ConcurrentHashMap.java:1916)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at com.github.benmanes.caffeine.cache.BoundedLocalCache.doComputeIfAbsent(BoundedLocalCache.java:2404)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at com.github.benmanes.caffeine.cache.BoundedLocalCache.computeIfAbsent(BoundedLocalCache.java:2387)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at com.github.benmanes.caffeine.cache.LocalCache.computeIfAbsent(LocalCache.java:108)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at com.github.benmanes.caffeine.cache.LocalManualCache.get(LocalManualCache.java:62)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:454)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:297)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:223)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider.loadUserByUsername(AbstractActiveDirectoryAuthenticationProvider.java:47)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.plugins.active_directory.ActiveDirectorySecurityRealm.loadUserByUsername(ActiveDirectorySecurityRealm.java:899)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.security.AbstractPasswordBasedSecurityRealm.loadUserByUsername2(AbstractPasswordBasedSecurityRealm.java:118)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at jenkins.security.ImpersonatingUserDetailsService2.loadUserByUsername(ImpersonatingUserDetailsService2.java:29)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices.processAutoLoginCookie(TokenBasedRememberMeServices.java:104)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.security.TokenBasedRememberMeServices2.processAutoLoginCookie(TokenBasedRememberMeServices2.java:169)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices.autoLogin(AbstractRememberMeServices.java:136)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:105)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:93)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:219)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:213)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at jenkins.security.BasicHeaderProcessor.doFilter(BasicHeaderProcessor.java:97)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:110)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:80)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSessionContextIntegrationFilter2.java:63)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:111)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:172)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:53)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:86)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.kohsuke.stapler.DiagnosticThreadNameFilter.doFilter(DiagnosticThreadNameFilter.java:30)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at jenkins.security.SuspiciousRequestFilter.doFilter(SuspiciousRequestFilter.java:38)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:548)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:571)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1624)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:233)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1440)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:188)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:501)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1594)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:186)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1355)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.Server.handle(Server.java:516)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:487)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:732)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:479)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:277)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:311)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:105)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.io.ChannelEndPoint$1.run(ChannelEndPoint.java:104)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.runTask(EatWhatYouKill.java:338)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.doProduce(EatWhatYouKill.java:315)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.tryProduce(EatWhatYouKill.java:173)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.run(EatWhatYouKill.java:131)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:409)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:883)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1034)
          Jul 20 22:48:31 pvysjenkins jenkins[1450283]:         at java.base/java.lang.Thread.run(Thread.java:833)

          ````

          Reverting to /usr/lib/jvm/java-11-openjdk-11.0.15.0.10-2.el8_6.x86_64 gets the server working again.

          In this situation the fallback "internal" admin user does not help, since the AD plugin is not there to handle it (not a fallback from networking issue in this case).

          Workaround above did help for Java 17 - great thanks to the poster!

          Jim Klimov added a comment - FWIW, still a problem "out of the box" with LTS 2.346.2, started with JDK17 on CentOS (/usr/lib/jvm/java-17-openjdk-17.0.3.0.7-2.el8_6.x86_64): ```` Jul 20 22:48:31 pvysjenkins jenkins [1450283] : java.lang.IllegalAccessError: class hudson.plugins.active_directory.ActiveDirectorySecurityRealm$DescriptorImpl (in unnamed module @0x78f0bc88) cannot access class com.sun.jndi.ldap.LdapCtxFactory (in module java.naming) because module java.naming does not export com.sun.jndi.ldap to unnamed module @0x78f0bc88 Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.plugins.active_directory.ActiveDirectorySecurityRealm$DescriptorImpl.bind(ActiveDirectorySecurityRealm.java:670) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.plugins.active_directory.ActiveDirectorySecurityRealm$DescriptorImpl.bind(ActiveDirectorySecurityRealm.java:601) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.plugins.active_directory.ActiveDirectorySecurityRealm$DescriptorImpl.bind(ActiveDirectorySecurityRealm.java:566) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.lambda$retrieveUser$0(ActiveDirectoryUnixAuthenticationProvider.java:368) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at com.github.benmanes.caffeine.cache.BoundedLocalCache.lambda$doComputeIfAbsent$14(BoundedLocalCache.java:2406) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at java.base/java.util.concurrent.ConcurrentHashMap.compute(ConcurrentHashMap.java:1916) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at com.github.benmanes.caffeine.cache.BoundedLocalCache.doComputeIfAbsent(BoundedLocalCache.java:2404) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at com.github.benmanes.caffeine.cache.BoundedLocalCache.computeIfAbsent(BoundedLocalCache.java:2387) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at com.github.benmanes.caffeine.cache.LocalCache.computeIfAbsent(LocalCache.java:108) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at com.github.benmanes.caffeine.cache.LocalManualCache.get(LocalManualCache.java:62) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:454) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:297) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:223) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider.loadUserByUsername(AbstractActiveDirectoryAuthenticationProvider.java:47) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.plugins.active_directory.ActiveDirectorySecurityRealm.loadUserByUsername(ActiveDirectorySecurityRealm.java:899) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.security.AbstractPasswordBasedSecurityRealm.loadUserByUsername2(AbstractPasswordBasedSecurityRealm.java:118) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at jenkins.security.ImpersonatingUserDetailsService2.loadUserByUsername(ImpersonatingUserDetailsService2.java:29) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices.processAutoLoginCookie(TokenBasedRememberMeServices.java:104) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.security.TokenBasedRememberMeServices2.processAutoLoginCookie(TokenBasedRememberMeServices2.java:169) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices.autoLogin(AbstractRememberMeServices.java:136) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:105) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:93) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:219) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:213) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at jenkins.security.BasicHeaderProcessor.doFilter(BasicHeaderProcessor.java:97) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:110) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:80) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSessionContextIntegrationFilter2.java:63) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:111) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:172) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:53) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:86) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.kohsuke.stapler.DiagnosticThreadNameFilter.doFilter(DiagnosticThreadNameFilter.java:30) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at jenkins.security.SuspiciousRequestFilter.doFilter(SuspiciousRequestFilter.java:38) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:548) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:571) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1624) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:233) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1440) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:188) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:501) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1594) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:186) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1355) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.Server.handle(Server.java:516) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:487) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:732) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:479) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:277) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:311) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:105) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.io.ChannelEndPoint$1.run(ChannelEndPoint.java:104) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.runTask(EatWhatYouKill.java:338) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.doProduce(EatWhatYouKill.java:315) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.tryProduce(EatWhatYouKill.java:173) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.run(EatWhatYouKill.java:131) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:409) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:883) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1034) Jul 20 22:48:31 pvysjenkins jenkins [1450283] :         at java.base/java.lang.Thread.run(Thread.java:833) ```` Reverting to /usr/lib/jvm/java-11-openjdk-11.0.15.0.10-2.el8_6.x86_64 gets the server working again. In this situation the fallback "internal" admin user does not help, since the AD plugin is not there to handle it (not a fallback from networking issue in this case). Workaround above did help for Java 17 - great thanks to the poster!

          Basil Crow added a comment -

          I proposed jenkinsci/active-directory-plugin#133 with some code based on Spring LDAP that compiles and should work but has not yet been tested yet. As I do not use Active Directory, I could use some help testing this.

          famod jimklimov Are you interested in testing the above with Java 17 and without the --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED workaround? I would very much appreciate hearing about whether this fixes the issue. Thanks!

          Basil Crow added a comment - I proposed jenkinsci/active-directory-plugin#133 with some code based on Spring LDAP that compiles and should work but has not yet been tested yet. As I do not use Active Directory, I could use some help testing this. famod jimklimov Are you interested in testing the above with Java 17 and without the --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED workaround? I would very much appreciate hearing about whether this fixes the issue. Thanks!

          Basil Crow added a comment -

          Incremental build 2.27-rc704.a_d13ff057b_f7 is available for testing:

          https://repo.jenkins-ci.org/incrementals/org/jenkins-ci/plugins/active-directory/2.27-rc704.a_d13ff057b_f7/

          For instructions on how to install an incremental build, see:

          https://www.jenkins.io/doc/book/managing/plugins/#advanced-installation

          Basil Crow added a comment - Incremental build 2.27-rc704.a_d13ff057b_f7 is available for testing: https://repo.jenkins-ci.org/incrementals/org/jenkins-ci/plugins/active-directory/2.27-rc704.a_d13ff057b_f7/ For instructions on how to install an incremental build, see: https://www.jenkins.io/doc/book/managing/plugins/#advanced-installation

          Jim Klimov added a comment - - edited

          Thanks! With this plugin and without the workaround in JAVA_OPTS it starts successfully and my AD-backed log-in remained active.

          Strangely the logs did include some issue talking to the domain, a minute after startup; not sure if it is intermittent (networking/environment) hiccup or something systemic about the plugin, since ultimately it worked. FWIW:

          Oct 01 16:01:34 jcontroller jenkins[3996138]: 2022-10-01 14:01:34.777+0000 [id=36]        INFO        jenkins.InitReactorRunner$1#onAttained: Prepared all plugins
          Oct 01 16:01:34 jcontroller jenkins[3996138]: 2022-10-01 14:01:34.809+0000 [id=36]        INFO        jenkins.InitReactorRunner$1#onAttained: Started all plugins
          Oct 01 16:01:34 jcontroller jenkins[3996138]: 2022-10-01 14:01:34.821+0000 [id=37]        INFO        jenkins.InitReactorRunner$1#onAttained: Augmented all extensions
          Oct 01 16:01:35 jcontroller jenkins[3996138]: 2022-10-01 14:01:35.915+0000 [id=40]        INFO        h.p.b.g.GlobalTimeOutConfiguration#load: global timeout not set
          Oct 01 16:01:36 jcontroller jenkins[3996138]: 2022-10-01 14:01:36.429+0000 [id=32]        INFO        hudson.slaves.SlaveComputer#tryReconnect: Attempting to reconnect master-worker
          Oct 01 16:01:36 jcontroller jenkins[3996138]: 2022-10-01 14:01:36.430+0000 [id=32]        INFO        hudson.slaves.SlaveComputer#tryReconnect: Attempting to reconnect master-worker-ltd
          Oct 01 16:01:36 jcontroller jenkins[3996138]: 2022-10-01 14:01:36.594+0000 [id=32]        INFO        jenkins.InitReactorRunner$1#onAttained: System config loaded
          Oct 01 16:01:36 jcontroller jenkins[3996138]: 2022-10-01 14:01:36.837+0000 [id=36]        INFO        jenkins.InitReactorRunner$1#onAttained: System config adapted
          Oct 01 16:01:36 jcontroller jenkins[3996138]: 2022-10-01 14:01:36.983+0000 [id=37]        INFO        jenkins.InitReactorRunner$1#onAttained: Loaded all jobs
          Oct 01 16:01:36 jcontroller jenkins[3996138]: 2022-10-01 14:01:36.989+0000 [id=37]        INFO        jenkins.InitReactorRunner$1#onAttained: Configuration for all jobs updated
          Oct 01 16:01:36 jcontroller jenkins[3996138]: 2022-10-01 14:01:36.998+0000 [id=82]        INFO        hudson.model.AsyncPeriodicWork#lambda$doRun$1: Started Download metadata
          Oct 01 16:01:37 jcontroller jenkins[3996138]: 2022-10-01 14:01:37.000+0000 [id=82]        INFO        hudson.model.AsyncPeriodicWork#lambda$doRun$1: Finished Download metadata. 2 ms
          Oct 01 16:01:37 jcontroller jenkins[3996138]: 2022-10-01 14:01:37.305+0000 [id=36]        INFO        jenkins.InitReactorRunner$1#onAttained: Completed initialization
          Oct 01 16:01:40 jcontroller jenkins[3996138]: [10/01/22 16:01:40] SSH Launch of master-worker on localhost completed in 4,160 ms
          Oct 01 16:01:40 jcontroller jenkins[3996138]: 2022-10-01 14:01:40.865+0000 [id=25]        INFO        hudson.lifecycle.Lifecycle#onReady: Jenkins is fully up and running
          Oct 01 16:01:40 jcontroller systemd[1]: Started Jenkins Continuous Integration Server.
          
          Oct 01 16:02:42 jcontroller jenkins[3996138]: 2022-10-01 14:02:42.726+0000 [id=19]        WARNING        h.p.a.ActiveDirectoryUnixAuthenticationProvider#retrieveUser: Communications issues when trying to authenticate against COMPANY.COM domain
          Oct 01 16:02:42 jcontroller jenkins[3996138]: javax.naming.NamingException
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:500)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:297)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:223)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider.loadUserByUsername(AbstractActiveDirectoryAuthenticationProvider.java:47)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.plugins.active_directory.ActiveDirectorySecurityRealm.loadUserByUsername(ActiveDirectorySecurityRealm.java:900)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.AbstractPasswordBasedSecurityRealm.loadUserByUsername2(AbstractPasswordBasedSecurityRealm.java:118)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at jenkins.security.ImpersonatingUserDetailsService2.loadUserByUsername(ImpersonatingUserDetailsService2.java:29)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices.processAutoLoginCookie(TokenBasedRememberMeServices.java:104)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.TokenBasedRememberMeServices2.processAutoLoginCookie(TokenBasedRememberMeServices2.java:169)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices.autoLogin(AbstractRememberMeServices.java:136)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:109)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:97)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:223)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:217)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at jenkins.security.BasicHeaderProcessor.doFilter(BasicHeaderProcessor.java:97)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:112)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:82)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSessionContextIntegrationFilter2.java:63)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:111)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:172)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:53)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:86)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.kohsuke.stapler.DiagnosticThreadNameFilter.doFilter(DiagnosticThreadNameFilter.java:30)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at jenkins.security.SuspiciousRequestFilter.doFilter(SuspiciousRequestFilter.java:38)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:527)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:131)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:549)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:223)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1571)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:221)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1378)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:176)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:484)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1544)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:174)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1300)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:129)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.Server.handle(Server.java:562)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.HttpChannel.lambda$handle$0(HttpChannel.java:505)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:762)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:497)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:282)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:319)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:100)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:894)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1038)
          Oct 01 16:02:42 jcontroller jenkins[3996138]:         at java.base/java.lang.Thread.run(Thread.java:833)
          

          So far, LGTM

          Thinking of it, might be the "fallback admin" user definition lookup failing, since it is not in the AD.

          Jim Klimov added a comment - - edited Thanks! With this plugin and without the workaround in JAVA_OPTS it starts successfully and my AD-backed log-in remained active. Strangely the logs did include some issue talking to the domain, a minute after startup; not sure if it is intermittent (networking/environment) hiccup or something systemic about the plugin, since ultimately it worked. FWIW: Oct 01 16:01:34 jcontroller jenkins[3996138]: 2022-10-01 14:01:34.777+0000 [id=36]        INFO        jenkins.InitReactorRunner$1#onAttained: Prepared all plugins Oct 01 16:01:34 jcontroller jenkins[3996138]: 2022-10-01 14:01:34.809+0000 [id=36]        INFO        jenkins.InitReactorRunner$1#onAttained: Started all plugins Oct 01 16:01:34 jcontroller jenkins[3996138]: 2022-10-01 14:01:34.821+0000 [id=37]        INFO        jenkins.InitReactorRunner$1#onAttained: Augmented all extensions Oct 01 16:01:35 jcontroller jenkins[3996138]: 2022-10-01 14:01:35.915+0000 [id=40]        INFO        h.p.b.g.GlobalTimeOutConfiguration#load: global timeout not set Oct 01 16:01:36 jcontroller jenkins[3996138]: 2022-10-01 14:01:36.429+0000 [id=32]        INFO        hudson.slaves.SlaveComputer#tryReconnect: Attempting to reconnect master-worker Oct 01 16:01:36 jcontroller jenkins[3996138]: 2022-10-01 14:01:36.430+0000 [id=32]        INFO        hudson.slaves.SlaveComputer#tryReconnect: Attempting to reconnect master-worker-ltd Oct 01 16:01:36 jcontroller jenkins[3996138]: 2022-10-01 14:01:36.594+0000 [id=32]        INFO        jenkins.InitReactorRunner$1#onAttained: System config loaded Oct 01 16:01:36 jcontroller jenkins[3996138]: 2022-10-01 14:01:36.837+0000 [id=36]        INFO        jenkins.InitReactorRunner$1#onAttained: System config adapted Oct 01 16:01:36 jcontroller jenkins[3996138]: 2022-10-01 14:01:36.983+0000 [id=37]        INFO        jenkins.InitReactorRunner$1#onAttained: Loaded all jobs Oct 01 16:01:36 jcontroller jenkins[3996138]: 2022-10-01 14:01:36.989+0000 [id=37]        INFO        jenkins.InitReactorRunner$1#onAttained: Configuration for all jobs updated Oct 01 16:01:36 jcontroller jenkins[3996138]: 2022-10-01 14:01:36.998+0000 [id=82]        INFO        hudson.model.AsyncPeriodicWork#lambda$doRun$1: Started Download metadata Oct 01 16:01:37 jcontroller jenkins[3996138]: 2022-10-01 14:01:37.000+0000 [id=82]        INFO        hudson.model.AsyncPeriodicWork#lambda$doRun$1: Finished Download metadata. 2 ms Oct 01 16:01:37 jcontroller jenkins[3996138]: 2022-10-01 14:01:37.305+0000 [id=36]        INFO        jenkins.InitReactorRunner$1#onAttained: Completed initialization Oct 01 16:01:40 jcontroller jenkins[3996138]: [10/01/22 16:01:40] SSH Launch of master-worker on localhost completed in 4,160 ms Oct 01 16:01:40 jcontroller jenkins[3996138]: 2022-10-01 14:01:40.865+0000 [id=25]        INFO        hudson.lifecycle.Lifecycle#onReady: Jenkins is fully up and running Oct 01 16:01:40 jcontroller systemd[1]: Started Jenkins Continuous Integration Server. Oct 01 16:02:42 jcontroller jenkins[3996138]: 2022-10-01 14:02:42.726+0000 [id=19]        WARNING        h.p.a.ActiveDirectoryUnixAuthenticationProvider#retrieveUser: Communications issues when trying to authenticate against COMPANY.COM domain Oct 01 16:02:42 jcontroller jenkins[3996138]: javax.naming.NamingException Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:500) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:297) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:223) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider.loadUserByUsername(AbstractActiveDirectoryAuthenticationProvider.java:47) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.plugins.active_directory.ActiveDirectorySecurityRealm.loadUserByUsername(ActiveDirectorySecurityRealm.java:900) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.AbstractPasswordBasedSecurityRealm.loadUserByUsername2(AbstractPasswordBasedSecurityRealm.java:118) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at jenkins.security.ImpersonatingUserDetailsService2.loadUserByUsername(ImpersonatingUserDetailsService2.java:29) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices.processAutoLoginCookie(TokenBasedRememberMeServices.java:104) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.TokenBasedRememberMeServices2.processAutoLoginCookie(TokenBasedRememberMeServices2.java:169) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices.autoLogin(AbstractRememberMeServices.java:136) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:109) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:97) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:223) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:217) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at jenkins.security.BasicHeaderProcessor.doFilter(BasicHeaderProcessor.java:97) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:112) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:82) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSessionContextIntegrationFilter2.java:63) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:111) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:172) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:53) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:86) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.kohsuke.stapler.DiagnosticThreadNameFilter.doFilter(DiagnosticThreadNameFilter.java:30) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at jenkins.security.SuspiciousRequestFilter.doFilter(SuspiciousRequestFilter.java:38) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:527) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:131) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:549) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:223) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1571) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:221) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1378) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:176) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:484) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1544) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:174) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1300) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:129) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.Server.handle(Server.java:562) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.HttpChannel.lambda$handle$0(HttpChannel.java:505) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:762) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:497) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:282) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:319) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:100) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:894) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1038) Oct 01 16:02:42 jcontroller jenkins[3996138]:         at java.base/java.lang. Thread .run( Thread .java:833) So far, LGTM Thinking of it, might be the "fallback admin" user definition lookup failing, since it is not in the AD.

          Basil Crow added a comment -

          Basil Crow added a comment - Fixed in jenkinsci/active-directory-plugin#133 . Released in 2.27 .

            basil Basil Crow
            famod Falko Modler
            Votes:
            6 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved: