SAML plugin - differentiate between encryption and signing certificate

[de_...@hotmail.com]

Hi , 

When setting up the Jenkins SAML plugin, is it possible to configure two 
different certificates (generated from the same private key) for signing 
and encryption? 
The plugin seems to allow to configure just one key alias from one 
keystore. (
https://github.com/jenkinsci/saml-plugin/blob/master/doc/CONFIGURE.md)
I'ml looking to configure 
alias 1 = private key A + signing certificate chain C1
alias 2 = private key A+ encryption certificate chain C2

When enabling option 'Auth Request Signature' to  enable the signature of 
the Redirect Binding Auth Request, I can see two key descriptors being 
written to the saml-sp-metadata.xml file: 


http://www.w3.org/2000/09/xmldsig#;>

...

and 

 
http://www.w3.org/2000/09/xmldsig#;>

...

This leads me to believe that a setup with different sign and encryption 
certs is a possibility.
I've tried to configure the correct values for my setup directly in the 
saml-sp-metadata.xml file, but the file gets overwritten on each login 
attempt. 

Does the current implementation of the saml plugin dictate the encryption 
and signing cert to be the same and if not, how do I configure these? 

Kind regards, 
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/3568ffcd-e1d7-43d8-9a42-69d4d4359a5co%40googlegroups.com.

Agent label conditional

[Alex Panayi]

Hey guys.

I have a step where i want to conditionally pick the agent based on the 
parameter. 

I can easily do this by duplicating the step, and having a when statement, 
but this creates step duplication. I just want the agent label to be 
dynamically changed based on a parameter.


-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/6ed5e088-55f8-4edc-8eae-8b02abe8566fn%40googlegroups.com.

Distributed Tasks

[Sindhuja Banyala]

I have set of test cases to be run. I will give these to a job which is 
configured to run on group of nodes(grouped using same label name). 
I want this particular job to split my test cases and assign to all the 
free nodes available in this group.
I tried elastic-axis plugin to achieve this distributed task mechanism, 
apparently it did not split the test cases instead it concurrently executed 
the same task on all the nodes present in that group. It would good if 
anybody can suggest any mandatory/missing configuration for Elastic-axis or 
any new plug-in that can serve my requirement. 

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/7ff5a617-ecef-4900-926a-0a83684fde40o%40googlegroups.com.

Re: Help required: jenkins SSH connectivity issue

['Dirk Heinrichs' via Jenkins Users]

Am Montag, den 27.07.2020, 09:37 +0200 schrieb Sakshi Rathore:
> thanks , can you please suggest how can i change it to non verifying
> one?

Click on your agent, select "Configure", look for "Host Key
Verification Strategy" and select "Non verifying Verification
Strategy".

HTH...

Dirk
-- 
Dirk Heinrichs
Senior Systems Engineer, Delivery Pipeline
OpenText ™ Discovery | Recommind
Phone: +49 2226 15966 18
Email: dhein...@opentext.com
Website: www.recommind.de
Recommind GmbH, Von-Liebig-Straße 1, 53359 Rheinbach
Vertretungsberechtigte Geschäftsführer Gordon Davies, Madhu
Ranganathan, Christian Waida, Registergericht Amtsgericht Bonn,
Registernummer HRB 10646
This e-mail may contain confidential and/or privileged information. If
you are not the intended recipient (or have received this e-mail in
error) please notify the sender immediately and destroy this e-mail.
Any unauthorized copying, disclosure or distribution of the material in
this e-mail is strictly forbidden
Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte
Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-
Mail irrtümlich erhalten haben, informieren Sie bitte sofort den
Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie
die unbefugte Weitergabe dieser Mail sind nicht gestattet.


-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/2cf8009f4d003529a5a2da3a984a0ad212f5a814.camel%40opentext.com.


signature.asc
Description: This is a digitally signed message part

Re: Help required: jenkins SSH connectivity issue

[Sakshi Rathore]

thanks , i tried this as well but while getting connection
encountring below error:

Permission denied (publickey,password,keyboard-interactive)
build marked as failed.

On Thu, Jul 23, 2020 at 3:47 PM jeremy mordkoff 
wrote:

> I think the issue is that the client does not trust the server's host key.
> These keys are stored by the client in ~/.ssh/known_hosts  Try
> copying/appending your .ssh/known_hosts file to jenkins'
>
>
>
> On Monday, July 20, 2020 at 5:43:39 PM UTC-4, Sakshi Rathore wrote:
>>
>> 0I have a bash script which connects and exexutes programs from my local
>> to remote server and now this should be executed from jenkins build so for
>> this jenkins is taking continous changes from git for this script but my
>> build is failing with below error:
>>
>> Warning: Identity file
>> /c/Users/D35N/Downloads/GitHubProjeckt/Automation/GitHubProjeckt/newharbortestkey
>> not accessible: No such file or directory. Host key verification failed.
>> Build step 'Execute shell' marked build as failure
>>
>> I have tried to set ssh connectivity in my jenkins server for this remote
>> server incredentials and ssh plugins but using my key i am getting an error
>> cant connect to the server.
>>
>> when i run the script from local it works fine and my ssh connection gets
>> established properly using SSH key.
>>
>> jenkins server is also integrated or installed on my kuberenets cluster
>> which is my remote server in this case and bash script should execute on
>> this kuberenets cluster.
>>
>> i generated ley for jenkins in remote server and using this key for ssh
>> plugin setup but i am getting cant connect to the server error everytime.
>>
> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to jenkinsci-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jenkinsci-users/092a6094-5f76-40bf-b2f6-0accc42e6f57o%40googlegroups.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/CAJeB3MM8PiT9hjFkLzSfDLyyJgz6Vs%3DJK2HuNmjKXefWLqOMpw%40mail.gmail.com.

Re: Help required: jenkins SSH connectivity issue

[Sakshi Rathore]

thanks , can you please suggest how can i change it to non verifying one?

On Thu, Jul 23, 2020 at 2:32 PM 'Dirk Heinrichs' via Jenkins Users <
jenkinsci-users@googlegroups.com> wrote:

> Am Donnerstag, den 23.07.2020, 13:08 +0200 schrieb Sakshi Rathore:
>
> [07/23/20 11:03:50] [SSH] WARNING: The SSH key for this host does not
> match the key required in the connection configuration. Connections will be
> denied until the host key matches the configuration key.
>
>
> You're sure you selected non-verifying strategy? Looks to me like it's
> still trying to verify the host key.
>
> HTH...
>
> Dirk
> --
> *Dirk Heinrichs*
> Senior Systems Engineer, Delivery Pipeline
> OpenText ™ Discovery | Recommind
> *Phone*: +49 2226 15966 18
> *Email*: dhein...@opentext.com
> *Website*: www.recommind.de
> Recommind GmbH, Von-Liebig-Straße 1, 53359 Rheinbach
> Vertretungsberechtigte Geschäftsführer Gordon Davies, Madhu Ranganathan,
> Christian Waida, Registergericht Amtsgericht Bonn, Registernummer HRB 10646
> This e-mail may contain confidential and/or privileged information. If you
> are not the intended recipient (or have received this e-mail in error)
> please notify the sender immediately and destroy this e-mail. Any
> unauthorized copying, disclosure or distribution of the material in this
> e-mail is strictly forbidden
> Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte
> Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail
> irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und
> vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte
> Weitergabe dieser Mail sind nicht gestattet.
>
> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to jenkinsci-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jenkinsci-users/5344dbc1bc6d8366f985b477483c8a78e9f383f4.camel%40opentext.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/CAJeB3MO%2BjxRE%3Dh95ZaBnTeHZwRA_sYmiScb6tQqcXP5nNS7Tjg%40mail.gmail.com.