• Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None

      Hi,

      after Jenkins LTS and Conjur Secrets plugin upgrade we are unable to retrieve manually defined Conjur Secret Jenkins credentials. We get "Malformed authorization token" error.

      See attachment for sample Jenkinsfile: a Conjur host identity was defined with read and execute privilege for a secret. Then this secret is retrieved using "withCredentials([conjurSecretCredential..." step. The first retrieval uses dynamically generated "Context Aware Credential Stores" credential ID and works flawlessly. Second step tries to retrieve manually defined Conjur Secret and fails.

      Our currently used version 1.0.12 of Conjur Secrets plugin works, version 1.0.13 works as well. Version 1.0.14 has this issue.

      See attachment for console output and Jenkins log files.

      Could you please investigate this? Thank you very much for your time.

        1. console.log
          2 kB
        2. jenkins.log
          11 kB
        3. Jenkinsfile
          0.6 kB

          [JENKINS-70830] Malformed authorization token

          Martin added a comment -

          After debugging this issue today I figured out the pattern.

          The username/password of the host defined in Conjur must be stored in the global credentials store in Jenkins. When I was using a per-folder credentials store for the host username/password it would give me this "malformed authentication token" error. 

          Martin added a comment - After debugging this issue today I figured out the pattern. The username/password of the host defined in Conjur must be stored in the global credentials store in Jenkins. When I was using a per-folder credentials store for the host username/password it would give me this "malformed authentication token" error. 

            cyberark_bizdev Edward Nunez
            stanislav_bebej Stanislav Bebej
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: