• Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Minor Minor
    • core

      The change made for JENKINS-72636 breaks scripted downloads with wget
      If you follow the documentation https://www.jenkins.io/doc/book/system-administration/authenticating-scripted-clients/#shell-with-wget and use the command

      wget --auth-no-challenge \
          --user=user --password=apiToken \
          http://jenkins.example.com/job/yourjob/lastSuccessfulBuild/artifact/build_record.txt

      wget will pass the username and password both for the initial request to the jenkins URL.
      Upon receiving the redirect to the resource URL, wget will again supply the BASIC authentication.

      The change made causes the download to fail with a 400 error and a cryptic error message in the logs `hudson.security.AccessDeniedException3: anonymous is missing the Run/Artifacts permission`

      Currently a work around is to use a `.netrc` so that the credentials are only sent for the main jenkins domain and not the resource subdomain

          [JENKINS-73422] JENKINS-72636 breaks scripted downloads

          Liam Baker created issue -
          Basil Crow made changes -
          Link New: This issue is caused by JENKINS-72636 [ JENKINS-72636 ]
          Liam Baker made changes -
          Description Original: The change made for JENKINS-72636 breaks scripted downloads with wget
          If you follow the documentation [https://www.jenkins.io/doc/book/system-administration/authenticating-scripted-clients/#shell-with-wget] and use the command
          {code:java}
          wget --auth-no-challenge \
              --user=user --password=apiToken \
              http://jenkins.example.com/job/your_job/build {code}

          wget will pass the username and password both for the initial request to the jenkins URL.
          Upon receiving the redirect to the resource URL, wget will again supply the BASIC authentication.

          The change made causes the download to fail with a 400 error and a cryptic error message in the logs `{color:#1d1c1d}hudson.security.AccessDeniedException3: anonymous is missing the Run/Artifacts permission{color}`

          Currently a work around is to use a `.netrc` so that the credentials are only sent for the main jenkins domain and not the resource subdomain
          New: The change made for JENKINS-72636 breaks scripted downloads with wget
          If you follow the documentation [https://www.jenkins.io/doc/book/system-administration/authenticating-scripted-clients/#shell-with-wget] and use the command
          {code:java}
          wget --auth-no-challenge \
              --user=user --password=apiToken \
              http://jenkins.example.com/job/yourjob/lastSuccessfulBuild/artifact/build_record.txt{code}
          wget will pass the username and password both for the initial request to the jenkins URL.
          Upon receiving the redirect to the resource URL, wget will again supply the BASIC authentication.

          The change made causes the download to fail with a 400 error and a cryptic error message in the logs `{color:#1d1c1d}hudson.security.AccessDeniedException3: anonymous is missing the Run/Artifacts permission{color}`

          Currently a work around is to use a `.netrc` so that the credentials are only sent for the main jenkins domain and not the resource subdomain
          Allan BURDAJEWICZ made changes -
          Remote Link New: This issue links to "jenkins #9644 (Web Link)" [ 29938 ]
          Allan BURDAJEWICZ made changes -
          Remote Link New: This issue links to "PR #7462 (Web Link)" [ 29939 ]
          Allan BURDAJEWICZ made changes -
          Assignee New: Allan BURDAJEWICZ [ allan_burdajewicz ]
          Allan BURDAJEWICZ made changes -
          Status Original: Open [ 1 ] New: In Progress [ 3 ]
          Allan BURDAJEWICZ made changes -
          Status Original: In Progress [ 3 ] New: In Review [ 10005 ]
          Allan BURDAJEWICZ made changes -
          Released As New: jenkins:2.475
          Resolution New: Fixed [ 1 ]
          Status Original: In Review [ 10005 ] New: Fixed but Unreleased [ 10203 ]
          Allan BURDAJEWICZ made changes -
          Labels New: lts-candidate
          Mark Waite made changes -
          Released As Original: jenkins:2.475 New: https://github.com/jenkinsci/jenkins/releases/tag/jenkins-2.475
          Status Original: Fixed but Unreleased [ 10203 ] New: Resolved [ 5 ]

            allan_burdajewicz Allan BURDAJEWICZ
            sm__liam_baker Liam Baker
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: