Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-71619

Jenkins tomcat - LDAP - Failed to scout hudson.security.LDAPSecurityRealm$DescriptorImpl

    • Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: Major Major
    • ldap-plugin
    • OS: CentOS Linux 7.6.1810
      Java: 11.18
      Tomcat : 9.X
      Jenkins : Jenkins 2.360 to 2.401.2
      Ldap : 659.v8ca_b_a_fe79fa_d to 682.v7b_544c9d1512

      Hi,

      After upgrade LDAP plugin to the latest version, jenkins stopped working at reboot.
      I always have the same exception :

      11-Jul-2023 08:45:22.025 WARNING [pool-6-thread-7] hudson.ExtensionFinder$Sezpoz.scout Failed to scout hudson.security.LDAPSecurityRealm$DescriptorImpl
          java.lang.NoClassDefFoundError: org/acegisecurity/ldap/LdapDataAccessException
              at java.base/java.lang.Class.forName0(Native Method)
              at java.base/java.lang.Class.forName(Class.java:398)
              at hudson.ExtensionFinder$Sezpoz.scout(ExtensionFinder.java:730)
              at hudson.ClassicPluginStrategy.findComponents(ClassicPluginStrategy.java:352)
              at hudson.ExtensionList.load(ExtensionList.java:384)
              at hudson.ExtensionList.ensureLoaded(ExtensionList.java:320)
              at hudson.ExtensionList.getComponents(ExtensionList.java:184)
              at jenkins.model.Jenkins$6.onInitMilestoneAttained(Jenkins.java:1191)
              at jenkins.InitReactorRunner$1.onAttained(InitReactorRunner.java:88)
              at org.jvnet.hudson.reactor.ReactorListener$Aggregator.lambda$onAttained$3(ReactorListener.java:108)
              at org.jvnet.hudson.reactor.ReactorListener$Aggregator.run(ReactorListener.java:115)
              at org.jvnet.hudson.reactor.ReactorListener$Aggregator.onAttained(ReactorListener.java:108)
              at org.jvnet.hudson.reactor.Reactor$1.run(Reactor.java:183)
              at org.jvnet.hudson.reactor.Reactor$Node.run(Reactor.java:121)
              at jenkins.security.ImpersonatingExecutorService$1.run(ImpersonatingExecutorService.java:70)
              at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
              at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
              at java.base/java.lang.Thread.run(Thread.java:834)
          Caused by: java.lang.ClassNotFoundException: org.acegisecurity.ldap.LdapDataAccessException 
      
      11-Jul-2023 08:45:24.405 WARNING [CustomOrganizationFolderDescriptor.addSpecificDescriptors] hudson.ExtensionFinder$GuiceFinder$FaultTolerantScope$1.error Failed to instantiate Key[type=jenkins.security.plugins.ldap.FromGroupSearchLDAPGroupMembershipStrategy$DescriptorImpl, annotation=[none]]; skipping this component
          com.google.inject.ProvisionException: Unable to provision, see the following errors:1) [Guice/ErrorInjectingConstructor]: NoClassDefFoundError: org/acegisecurity/ldap/LdapEntryMapper
        at FromGroupSearchLDAPGroupMembershipStrategy$DescriptorImpl.<init>(FromGroupSearchLDAPGroupMembershipStrategy.java:92)Learn more:
        https://github.com/google/guice/wiki/ERROR_INJECTING_CONSTRUCTOR1 error======================
      Full classname legend:
      ======================
      FromGroupSearchLDAPGroupMembershipStrategy$DescriptorImpl: "jenkins.security.plugins.ldap.FromGroupSearchLDAPGroupMembershipStrategy$DescriptorImpl"
      ========================
      End of classname legend:
      ========================

      I read that ldap attribut groupMembershipStrategy is not use anymore but I can not delete this attribut because I am not in JCasC configuration.

      I use Jenkins WAR with tomcat.

       

      Thanks for your help

       

          [JENKINS-71619] Jenkins tomcat - LDAP - Failed to scout hudson.security.LDAPSecurityRealm$DescriptorImpl

          Mark Waite added a comment -

          You'll need to provide much more information in order to persuade others to investigate further. See "How to report an issue" for the types of information that are needed. Some of the areas of concern in what you've reported:

          • Jenkins 2.360 - the Jenkins project provides security fixes only for the most recent weekly and most recent LTS releases. Jenkins 2.360 is a weekly release from 12 months ago. It has several known security issues that are resolved in the most recent weekly release, Jenkins 2.413
          • CentOS 7.6 - the Jenkins project will stop supporting Red Hat Enterprise Linux 7 derivatives in Nov 2023, including CentOS 7. CentOS 7.9 is the most recent patched version of CentOS 7. Any testing of CentOS 7 in the Jenkins project is done with CentOS 7.9

          Mark Waite added a comment - You'll need to provide much more information in order to persuade others to investigate further. See "How to report an issue" for the types of information that are needed. Some of the areas of concern in what you've reported: Jenkins 2.360 - the Jenkins project provides security fixes only for the most recent weekly and most recent LTS releases. Jenkins 2.360 is a weekly release from 12 months ago. It has several known security issues that are resolved in the most recent weekly release, Jenkins 2.413 CentOS 7.6 - the Jenkins project will stop supporting Red Hat Enterprise Linux 7 derivatives in Nov 2023 , including CentOS 7. CentOS 7.9 is the most recent patched version of CentOS 7. Any testing of CentOS 7 in the Jenkins project is done with CentOS 7.9

          Ray Muggy added a comment - - edited

          Hi,

          I upgrade my Jenkins to 2.401.2 and faced the same issue with LDAP plugin 682.v7b_544c9d1512 with java 11.18.

           

          My ldap plugin version is 2.10

          So I rolled back and stuck with Jenkins Jenkins 2.356 and java 8.361.

           

          Thanks for your help

          Ray Muggy added a comment - - edited Hi, I upgrade my Jenkins to 2.401.2 and faced the same issue with LDAP plugin 682.v7b_544c9d1512 with java 11.18 .   My ldap plugin version is 2.10 So I rolled back and stuck with Jenkins Jenkins 2.356 and java 8.361 .   Thanks for your help

          Mark Waite added a comment -

          I'm glad that works for your needs. I'm closing this as "Cannot reproduce" because there is no hope that others will be able to duplicate the problem you were seeing without the additional information requested in "How to report an issue".

          Mark Waite added a comment - I'm glad that works for your needs. I'm closing this as "Cannot reproduce" because there is no hope that others will be able to duplicate the problem you were seeing without the additional information requested in "How to report an issue".

            Unassigned Unassigned
            jaegger Ray Muggy
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: