[JIRA] [active-directory-plugin] (JENKINS-26899) Multiple domain authentication when not part of the same forest
Title: Message Title Frédéric Meyrou edited a comment on JENKINS-26899 Re: Multiple domain authentication when not part of the same forest Hi Mates,We have the same issue here in AGFA and it's a blocker.I tried to use LDAP plugin instead but it doesn't help and it's too slow.Thanks for your help,./FM NB : Usgin Jenkins LTS 1.625 & Plugin 1.41 Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [active-directory-plugin] (JENKINS-26899) Multiple domain authentication when not part of the same forest
Title: Message Title Frédéric Meyrou commented on JENKINS-26899 Re: Multiple domain authentication when not part of the same forest Hi Mates, We have the same issue here in AGFA and it's a blocker. I tried to use LDAP plugin instead but it doesn't help and it's too slow. Thanks for your help, ./FM Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [active-directory-plugin] (JENKINS-26899) Multiple domain authentication when not part of the same forest
Title: Message Title James Nord updated an issue Jenkins / JENKINS-26899 Multiple domain authentication when not part of the same forest Change By: James Nord Issue Type: Bug New Feature Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [active-directory-plugin] (JENKINS-26899) Multiple domain authentication when not part of the same forest
Title: Message Title James Nord commented on JENKINS-26899 Re: Multiple domain authentication when not part of the same forest multiple servers are used for failover (ie they are expected to be the serving the same domain) - so setting to feature request. Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [active-directory-plugin] (JENKINS-26899) Multiple domain authentication when not part of the same forest
Title: Message Title James Nord updated an issue Jenkins / JENKINS-26899 Multiple domain authentication when not part of the same forest Change By: James Nord Comment: multiple servers are used for failover (ie they are expected to be the serving the same domain) - so setting to feature request. Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [active-directory-plugin] (JENKINS-26899) Multiple domain authentication when not part of the same forest
Title: Message Title James Nord updated an issue Jenkins / JENKINS-26899 Multiple domain authentication when not part of the same forest Change By: James Nord Issue Type: New Feature Bug Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [active-directory-plugin] (JENKINS-26899) Multiple domain authentication when not part of the same forest
Title: Message Title Sagayaraj David edited a comment on JENKINS-26899 Re: Multiple domain authentication when not part of the same forest Wealsofacethisproblem.WhentwoActiveDirectorydomainsareconfigured,thexmlAPIcallisnotsuccessful;howeverthesameuserissuccessfullyabletologinonthewebinterface.ItlookslikeitisalwaystryingtoauthenticateasAnonymouseventhoughwepasstheUserandAPItoken.WeinvoketheAPIasbelow:wget-d-OJobInfo.xml--http-user=MyUser--http-password=MyAPIToken--secure-protocol=TLSv1http://jenkins.mydomain/job/TESTJOB/api/xmlErrormessage:Authenticationrequired!--Youareauthenticatedas:anonymousGroupsthatyouarein:Permissionyouneedtohave(butdidn't):hudson.model.Hudson.Read...whichisimpliedby:hudson.security.Permission.GenericRead...whichisimpliedby:hudson.model.HSkipping337bytesofbody:[udson.Administer OurJenkinsver.1.596.2onWindows2008R2 Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [active-directory-plugin] (JENKINS-26899) Multiple domain authentication when not part of the same forest
Title: Message Title Sagayaraj David commented on JENKINS-26899 Re: Multiple domain authentication when not part of the same forest We also face this problem. When two Active Directory domains are configured, the xml API call is not successful; however the same user is successfully able to login on the web interface. It looks like it is always trying to authenticate as Anonymous even though we pass the User and API token. We invoke the API as below: wget -d -O JobInfo.xml --http-user=MyUser --http-password=MyAPIToken --secure-protocol=TLSv1 http://jenkins.mydomain/job/TESTJOB/api/xml Error message: Authentication required!--You are authenticated as: anonymousGroups that you are in:Permission you need to have (but didn't): hudson.model.Hudson.Read... which is implied by: hudson.security.Permission.GenericRead... which is implied by: hudson.model.HSkipping 337 bytes of body: [udson.Administer Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [active-directory-plugin] (JENKINS-26899) Multiple domain authentication when not part of the same forest
Dan D commented on JENKINS-26899 Multiple domain authentication when not part of the same forest I'll try again regarding no spaces - but I'm sure I took out any whitespace (in the logs when i first started troubleshooting, I did see a whitespace initially when jenkins joined the single username to the attempted domain). It does seem to attempt to tack on both domains, but it seems it only asks one of the servers on the list. (I added two domain controllers for each domain separated by a comma as well) If the UNIX implementation is being called under the hood, a) can that implementation be configured to bind using 2 diff credentials and b) would i be able to hand edit the config file to configure it since GUI wouldn't work? This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [active-directory-plugin] (JENKINS-26899) Multiple domain authentication when not part of the same forest
Daniel Beck commented on JENKINS-26899 Multiple domain authentication when not part of the same forest Make sure to only use a comma, don't add spaces before/after it. Could also be the usual problem that configuring anything on Windows invokes the Unix (LDAP) implementation, but doesn't show the options specific to that. This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [active-directory-plugin] (JENKINS-26899) Multiple domain authentication when not part of the same forest
Dan D commented on JENKINS-26899 Multiple domain authentication when not part of the same forest Appreciate it. I believe the documentation makes the assumption that the domains must be in the same forest (due to some other related bugs in the tracker) but the docs do not explicitly state that, so I question the validity of that statement. This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [active-directory-plugin] (JENKINS-26899) Multiple domain authentication when not part of the same forest
Dan D commented on JENKINS-26899 Multiple domain authentication when not part of the same forest Made sure there were no whitespaces in either the domain or the domain controller field. Same problem. This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [active-directory-plugin] (JENKINS-26899) Multiple domain authentication when not part of the same forest
Dan D created JENKINS-26899 Multiple domain authentication when not part of the same forest Issue Type: Bug Assignee: Unassigned Components: active-directory-plugin Created: 11/Feb/15 12:20 PM Description: I'm attemping to do AD authentication with the latest AD plugin. I need to authenticate against two domains (that trust each other but are NOT in the same forest. This works fine in other applications doing LDAP). Individually, configuring each of these domains work. But when I attempt to add two separated by commas as per the docs, only the first entry works. Can anyone recommend a solution? I get errors like "Credential exception trying to authenticate against myotherdomain.com domain and: org.acegisecurity.BadCredentialsException: Either no such user 'u...@myotherdomain.com' or incorrect password; nested exception is javax.naming.AuthenticationException: LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1 -- my user definitely exists. Tested with other LDAP enabled apps. Also, I'm the admin for LDAP. I believe this is an issue with the binding credentials Jenkins is using, which is a show stopper because Jenkins won't allow me to configure two separate binding credentials - even with the LDAP plugin. Environment: Jenkins ver 1.595 on Windows Server 2012. AD plugin version 1.39 Project: Jenkins Priority: Critical Reporter: Dan D This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [active-directory-plugin] (JENKINS-26899) Multiple domain authentication when not part of the same forest
Daniel Beck updated JENKINS-26899 Multiple domain authentication when not part of the same forest My apologies, missed But when I attempt to add two separated by commas as per the docs, only the first entry works. Can anyone recommend a solution? Change By: Daniel Beck (11/Feb/15 1:47 PM) Issue Type: NewFeature Bug This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [active-directory-plugin] (JENKINS-26899) Multiple domain authentication when not part of the same forest
Daniel Beck updated JENKINS-26899 Multiple domain authentication when not part of the same forest Your configuration seems to just not be supported, making this a feature request rather than a bug. Change By: Daniel Beck (11/Feb/15 1:46 PM) Issue Type: Bug NewFeature Priority: Critical Major This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
