[JIRA] [core] (JENKINS-25842) User Permissions Wiped After Jenkins Restart

2014-12-22 Thread cjp...@gmail.com (JIRA)














































Chris Parr
 commented on  JENKINS-25842


User Permissions Wiped After Jenkins Restart















Hi,

To reproduce just follow the steps in the description on a clean install.

I don't know Eli, but I do have a work around for this. It seems to be either a config persistence issue or an issue with the style of user id (or both). 

1. Make sure user IDs are lower case
2. After setting up security, go to the general config page and save (even though you don't change anything).

I picked up these hints from the Jenkins user list. I tried them both at the same time and they gave me a secure working instance. Don't know if perhaps step 1 on it's own would work, but I didn't have time to test on a clean instance.

Cheers

Chris



























This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira







-- 
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[JIRA] [core] (JENKINS-25842) User Permissions Wiped After Jenkins Restart

2014-12-03 Thread cjp...@gmail.com (JIRA)














































Chris Parr
 commented on  JENKINS-25842


User Permissions Wiped After Jenkins Restart















A bit of an update (and a work around).

Following the advice of Daniel Beck on the stackoverflow post above, I did 2 things to work around:

1: Restricted any usernames I added to lower case only.
2: When logged in with full permissions, I made sure I saved the 'configure system' page (even though there were no changes).

I don't know if both were required, but I now have an instance where permissions will persist after restart.



























This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira







-- 
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[JIRA] [core] (JENKINS-25842) User Permissions Wiped After Jenkins Restart

2014-12-01 Thread cjp...@gmail.com (JIRA)














































Chris Parr
 commented on  JENKINS-25842


User Permissions Wiped After Jenkins Restart















I have also updated to the latest version and the issue remains



























This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira







-- 
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[JIRA] [core] (JENKINS-25842) User Permissions Wiped After Jenkins Restart

2014-12-01 Thread cjp...@gmail.com (JIRA)














































Chris Parr
 updated  JENKINS-25842


User Permissions Wiped After Jenkins Restart
















Change By:


Chris Parr
(01/Dec/14 11:45 AM)




Description:


See here also: http://stackoverflow.com/questions/27131560/jenkins-user-permissions-wiped-on-restartEssentially I can set up security and it works, but after a restart all permissions are wiped:1. Downloaded Redhat rpm from Jenkings main site (jenkins-1.590-1.1.noarch.rpm) and installed directly onto server2. Jobs can be set up and work fine3. Enabled jenkins own DB authentication with matrix permissions4. Add myself a user ID and assign full permissions, allowing anonymous 'overall read' (NOTE I have done this with and without setting this anonymous permission and the result is the same)5. Save6. Restart jenkins7. Create an account to link the ID added in #48. All seems fine, permissions are in place and I can do everything I want to9. can log out and back in without problem10. Restart jenkins11. Log back into the account12. All permissions are gone and I can't access the system.13. If I try to hit a secure page directly I get the message "t143ahe is missing the Overall/Administer permission"14. This will happen with all users if I have added more than one.
The same happens with project based matrix authentication.
To get get back into Jenkins I have to disable security by deleting config.xml and deleting user folders from the users directory.
Rightly or wrongly I've marked this as a Blocker as I can't set up CI in my company without this security in place (can't have Joe Bloggs kicking off a production build).





Priority:


Minor
Blocker



























This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira







-- 
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[JIRA] [core] (JENKINS-25842) User Permissions Wiped After Jenkins Restart

2014-12-01 Thread cjp...@gmail.com (JIRA)














































Chris Parr
 created  JENKINS-25842


User Permissions Wiped After Jenkins Restart















Issue Type:


Bug



Assignee:


Unassigned


Components:


core, security



Created:


01/Dec/14 11:42 AM



Description:


See here also: http://stackoverflow.com/questions/27131560/jenkins-user-permissions-wiped-on-restart

Essentially I can set up security and it works, but after a restart all permissions are wiped:

1. Downloaded Redhat rpm from Jenkings main site (jenkins-1.590-1.1.noarch.rpm) and installed directly onto server

2. Jobs can be set up and work fine

3. Enabled jenkins own DB authentication with matrix permissions

4. Add myself a user ID and assign full permissions, allowing anonymous 'overall read' (NOTE I have done this with and without setting this anonymous permission and the result is the same)

5. Save

6. Restart jenkins

7. Create an account to link the ID added in #4

8. All seems fine, permissions are in place and I can do everything I want to

9. can log out and back in without problem

10. Restart jenkins

11. Log back into the account

12. All permissions are gone and I can't access the system.

13. If I try to hit a secure page directly I get the message "t143ahe is missing the Overall/Administer permission"

14. This will happen with all users if I have added more than one.

To get get back into Jenkins I have to disable security by deleting config.xml and deleting user folders from the users directory.




Environment:


System Properties



Name  / Value   

com.sun.akuma.Daemon	daemonized

executable-war	/usr/lib/jenkins/jenkins.war

file.encoding	UTF-8

file.encoding.pkg	sun.io

file.separator	/

guice.disable.misplaced.annotation.check	true

http.proxyHost	icsarray.ics.express.tnt

http.proxyPort	8080

hudson.diyChunking	true

java.awt.graphicsenv	sun.awt.X11GraphicsEnvironment

java.awt.headless	true

java.awt.printerjob	sun.print.PSPrinterJob

java.class.path	/usr/lib/jenkins/jenkins.war

java.class.version	50.0

java.endorsed.dirs	/communique2/java/jdk1.6.0_71/jre/lib/endorsed

java.ext.dirs	/communique2/java/jdk1.6.0_71/jre/lib/ext:/usr/java/packages/lib/ext

java.home	/communique2/java/jdk1.6.0_71/jre

java.io.tmpdir	/tmp

java.library.path	/communique2/java/jdk1.6.0_71/jre/lib/amd64/server:/communique2/java/jdk1.6.0_71/jre/lib/amd64:/communique2/java/jdk1.6.0_71/jre/../lib/amd64:/usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib

java.runtime.name	Java(TM) SE Runtime Environment

java.runtime.version	1.6.0_71-b12

java.specification.name	Java Platform API Specification

java.specification.vendor	Sun Microsystems Inc.

java.specification.version	1.6

java.vendor	Sun Microsystems Inc.

java.vendor.url	http://java.sun.com/

java.vendor.url.bug	http://java.sun.com/cgi-bin/bugreport.cgi

java.version	1.6.0_71

java.vm.info	mixed mode

java.vm.name	Java HotSpot(TM) 64-Bit Server VM

java.vm.specification.name	Java Virtual Machine Specification

java.vm.specification.vendor	Sun Microsystems Inc.

java.vm.specification.version	1.0

java.vm.vendor	Sun Microsystems Inc.

java.vm.version	20.71-b01

JENKINS_HOME	/var/lib/jenkins

jna.platform.library.path	/usr/lib64:/lib64:/usr/lib:/lib

jnidispatch.path	/tmp/jna--1712433994/jna4896909062887311416.tmp

line.separator	

mail.smtp.sendpartial	true

mail.smtps.sendpartial	true

os.arch	amd64

os.name	Linux

os.version	2.6.18-238.5.1.el5

path.separator	:

securerandom.source	file:/dev/./urandom

sun.arch.data.model	64

sun.boot.class.path	/communique2/java/jdk1.6.0_71/jre/lib/resources.jar:/communique2/java/jdk1.6.0_71/jre/lib/rt.jar:/communique2/java/jdk1.6.0_71/jre/lib/sunrsasign.jar:/communique2/java/jdk1.6.0_71/jre/lib/jsse.jar:/communique2/java/jdk1.6.0_71/jre/lib/jce.jar:/communique2/java/jdk1.6.0_71/jre/lib/charsets.jar:/communique2/java/jdk1.6.0_71/jre/lib/modules/jdk.boot.jar:/communique2/java/jdk1.6.0_71/jre/classes

sun.boot.library.path	/communique2/java/jdk1.6.0_71/jre/lib/amd64

sun.cpu.endian	little

sun.cpu.isalist	

sun.io.unicode.encoding	UnicodeLittle

sun.java.command	/usr/l