melvin bautista added a comment - 2012-06-20 08:51 same issue here. i think you must remove the jenkins to your server or unisntall jenkins then install it again. )

Daniel Beck added a comment - 2014-09-01 22:49 What exactly is the desired behavior here? That Jenkins does not even accept the new configuration when you save it? Because you will lock yourself and everyone else out.

Daniel Beck added a comment - 2014-09-22 20:52 Related: https://wiki.jenkins-ci.org/display/JENKINS/Disable+security

Mickael Ange added a comment - 2014-10-06 04:22 Hi, I have 2 Jenkins instances in testing (1.565.3) with a unique administrator account for username mickael . I configured "Project-based Matrix Authorization Strategy" on both and I don't know why (maybe my bad during the process), one instance failed to restart after installing thinBackup plugin from CLI. Oct 06, 2014 11:50:16 AM hudson.util.BootFailure publish SEVERE: Failed to initialize Jenkins hudson.util.HudsonFailedToLoad: org.jvnet.hudson.reactor.ReactorException: java.io.IOException: Unable to read / var /lib/jenkins/config.xml at hudson.WebAppMain$3.run(WebAppMain.java:234) Caused by: org.jvnet.hudson.reactor.ReactorException: java.io.IOException: Unable to read / var /lib/jenkins/config.xml at org.jvnet.hudson.reactor.Reactor.execute(Reactor.java:269) at jenkins.InitReactorRunner.run(InitReactorRunner.java:44) at jenkins.model.Jenkins.executeReactor(Jenkins.java:916) at jenkins.model.Jenkins.<init>(Jenkins.java:815) at hudson.model.Hudson.<init>(Hudson.java:82) at hudson.model.Hudson.<init>(Hudson.java:78) at hudson.WebAppMain$3.run(WebAppMain.java:222) Caused by: java.io.IOException: Unable to read / var /lib/jenkins/config.xml at hudson.XmlFile.unmarshal(XmlFile.java:165) at jenkins.model.Jenkins$17.run(Jenkins.java:2565) at org.jvnet.hudson.reactor.TaskGraphBuilder$TaskImpl.run(TaskGraphBuilder.java:169) at org.jvnet.hudson.reactor.Reactor.runTask(Reactor.java:282) at jenkins.model.Jenkins$7.runTask(Jenkins.java:905) at org.jvnet.hudson.reactor.Reactor$2.run(Reactor.java:210) at org.jvnet.hudson.reactor.Reactor$Node.run(Reactor.java:117) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang. Thread .run( Thread .java:745) Caused by: com.thoughtworks.xstream.converters.ConversionException: only START_TAG can have attributes END_TAG seen ...ategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" />... @8:86 : only START_TAG can have attributes END_TAG seen ...ategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" />... @8:86 ---- Debugging information ---- message : only START_TAG can have attributes END_TAG seen ...ategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" />... @8:86 cause-exception : java.lang.IndexOutOfBoundsException cause-message : only START_TAG can have attributes END_TAG seen ...ategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" />... @8:86 class : hudson.security.ProjectMatrixAuthorizationStrategy required-type : hudson.security.ProjectMatrixAuthorizationStrategy converter-type : hudson.util.XStream2$AssociatedConverterImpl path : /hudson/authorizationStrategy line number : 8 class[ 1] : hudson.model.Hudson converter-type[1] : hudson.util.RobustReflectionConverter version : not available ------------------------------- at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:79) at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:65) at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:66) at hudson.util.RobustReflectionConverter.unmarshalField(RobustReflectionConverter.java:349) at hudson.util.RobustReflectionConverter.doUnmarshal(RobustReflectionConverter.java:289) at hudson.util.RobustReflectionConverter.unmarshal(RobustReflectionConverter.java:228) at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:72) at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:65) at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:66) at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:50) at com.thoughtworks.xstream.core.TreeUnmarshaller.start(TreeUnmarshaller.java:134) at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.unmarshal(AbstractTreeMarshallingStrategy.java:32) at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1189) at hudson.util.XStream2.unmarshal(XStream2.java:113) at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1173) at hudson.XmlFile.unmarshal(XmlFile.java:163) ... 9 more Caused by: java.lang.IndexOutOfBoundsException: only START_TAG can have attributes END_TAG seen ...ategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" />... @8:86 at org.xmlpull.mxp1.MXParser.getAttributeValue(MXParser.java:927) at com.thoughtworks.xstream.io.xml.XppReader.getAttribute(XppReader.java:139) at com.thoughtworks.xstream.io.ReaderWrapper.getAttribute(ReaderWrapper.java:52) at hudson.util.RobustReflectionConverter.instantiateNewInstance(RobustReflectionConverter.java:383) at hudson.util.RobustReflectionConverter.unmarshal(RobustReflectionConverter.java:227) at hudson.security.ProjectMatrixAuthorizationStrategy$ConverterImpl.unmarshal(ProjectMatrixAuthorizationStrategy.java:120) at hudson.util.XStream2$AssociatedConverterImpl.unmarshal(XStream2.java:362) at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:72) ... 24 more I managed to fix the problem by comparing both instance config.xml. Failing config.xml, instance 1 <?xml version= '1.0' encoding= 'UTF-8' ?> <hudson> <disabledAdministrativeMonitors/> <version>1.0</version> <numExecutors>2</numExecutors> <mode>NORMAL</mode> <useSecurity> true </useSecurity> <authorizationStrategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" /> <securityRealm class= "hudson.security.HudsonPrivateSecurityRealm" > <disableSignup> true </disableSignup> <enableCaptcha> false </enableCaptcha> </securityRealm> <disableRememberMe> false </disableRememberMe> <projectNamingStrategy class= "jenkins.model.ProjectNamingStrategy$DefaultProjectNamingStrategy" /> <workspaceDir>${ITEM_ROOTDIR}/workspace</workspaceDir> <buildsDir>${ITEM_ROOTDIR}/builds</buildsDir> <markupFormatter class= "hudson.markup.EscapedMarkupFormatter" /> <jdks/> <viewsTabBar class= "hudson.views.DefaultViewsTabBar" /> <myViewsTabBar class= "hudson.views.DefaultMyViewsTabBar" /> <clouds/> <slaves/> <scmCheckoutRetryCount>0</scmCheckoutRetryCount> <views> <hudson.model.AllView> <owner class= "hudson" reference= "../../.." /> <name>All</name> <filterExecutors> false </filterExecutors> <filterQueue> false </filterQueue> <properties class= "hudson.model.View$PropertyList" /> </hudson.model.AllView> </views> <primaryView>All</primaryView> <slaveAgentPort>0</slaveAgentPort> <label></label> <nodeProperties/> <globalNodeProperties/> </hudson> Working config.xml, instance 2 <?xml version= '1.0' encoding= 'UTF-8' ?> <hudson> <disabledAdministrativeMonitors> <string>jenkins.security.RekeySecretAdminMonitor</string> </disabledAdministrativeMonitors> <version>1.565.3</version> <numExecutors>2</numExecutors> <mode>NORMAL</mode> <useSecurity> true </useSecurity> <authorizationStrategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" > <permission>hudson.model.Hudson.Administer:mickael</permission> </authorizationStrategy> <securityRealm class= "hudson.security.HudsonPrivateSecurityRealm" > <disableSignup> true </disableSignup> <enableCaptcha> false </enableCaptcha> </securityRealm> <disableRememberMe> false </disableRememberMe> <projectNamingStrategy class= "jenkins.model.ProjectNamingStrategy$DefaultProjectNamingStrategy" /> <workspaceDir>${ITEM_ROOTDIR}/workspace</workspaceDir> <buildsDir>${ITEM_ROOTDIR}/builds</buildsDir> <markupFormatter class= "hudson.markup.EscapedMarkupFormatter" /> <jdks/> <viewsTabBar class= "hudson.views.DefaultViewsTabBar" /> <myViewsTabBar class= "hudson.views.DefaultMyViewsTabBar" /> <clouds/> <slaves/> <quietPeriod>5</quietPeriod> <scmCheckoutRetryCount>0</scmCheckoutRetryCount> <views> <hudson.model.AllView> <owner class= "hudson" reference= "../../.." /> <name>All</name> <filterExecutors> false </filterExecutors> <filterQueue> false </filterQueue> <properties class= "hudson.model.View$PropertyList" /> </hudson.model.AllView> </views> <primaryView>All</primaryView> <slaveAgentPort>0</slaveAgentPort> <label></label> <nodeProperties/> <globalNodeProperties/> </hudson> The main difference is on <authorizationStrategy> tag. If I edited /var/lib/jenkins/config.xml and replaced <authorizationStrategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" /> by <authorizationStrategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" > <permission>hudson.model.Hudson.Administer:mickael</permission> </authorizationStrategy> then, after restarting the instance, Jenkins is back to work. Cheers,

Shubham Sharma added a comment - 2015-09-22 06:29 Thanks mickael.It worked for me.

Raghavendra Tallam added a comment - 2016-03-02 20:30 I faced the same issue. I tried to Update the Plugin along with Some other Plugins uninstalls. So, I Deleted the DISABLED files in Plugins Folder and Restarted my Jenkins Instance. Jenkins Loaded like a Charm..

SCM/JIRA link daemon added a comment - 2017-07-14 10:09 Code changed in jenkins User: Raul Arabaolaza Path: src/test/java/com/cloudbees/hudson/plugins/folder/FolderTest.java http://jenkins-ci.org/commit/cloudbees-folder-plugin/c17a394bf4afeea0bf05bc033c305d93db6c5ead Log: JENKINS-45501 Fixes for JENKINS-9774 and JENKINS-41370 Now `hudson.security.ProjectMatrixAuthorizationStrategy` can be deserialized Bypassing the GUI on `copyJob` and issuing the proper Http request directly

Daniel Beck added a comment - 2017-09-14 06:54 https://github.com/jenkinsci/matrix-auth-plugin/pull/25 ensures empty project-based configurations can be loaded in case this is actually desired. https://github.com/jenkinsci/matrix-auth-plugin/pull/24 ensures no accidental 'empty' configuration can be submitted, which seems to be the major issue to me.

SCM/JIRA link daemon added a comment - 2017-09-14 07:58 Code changed in jenkins User: Daniel Beck Path: src/main/java/hudson/security/ProjectMatrixAuthorizationStrategy.java src/test/java/hudson/security/ProjectMatrixAuthorizationStrategyTest.java src/test/resources/hudson/security/ProjectMatrixAuthorizationStrategyTest/loadEmptyAuthorizationStrategy/config.xml src/test/resources/hudson/security/ProjectMatrixAuthorizationStrategyTest/loadFilledAuthorizationStrategy/config.xml http://jenkins-ci.org/commit/matrix-auth-plugin/9463c2142a1f3c558a19a51017480d16ba205bf4 Log: Merge pull request #25 from daniel-beck/unmarshal-robustness JENKINS-9774 Drop support for pre-2009 serialized format that resulted in errors Compare: https://github.com/jenkinsci/matrix-auth-plugin/compare/b53384b02589...9463c2142a1f

Daniel Beck added a comment - 2017-09-14 07:59 Resolved towards matrix-auth 1.8.