Re: Using multiple AD servers

[Pavel Novák]

Hi, 
we were using setup with multiple domains, and it worked, 
recently we reconfigured setup to use kind of global AD catalog, (which is 
wrapping all domains) 

What will happen with jenkins users once you will configure multiple ADs 
and there will be same ID on both domains I am quite not sure, 
I think its readon only ldapID and group membership if its configured, I am 
worrying it will do not read any other parameter, but maybe 


Dne pondělí 16. září 2019 11:09:33 UTC+2 Mike Bayliss napsal(a):
>
> Does anybody have experience with using multiple Active Directory servers?
>
> Specifically, we're looking a case where our users will gradually migrate 
> from one AD domain to another, using a SIDhistory attribute in the new AD 
> to match against the objectSID in the old AD. Is that supported by Jenkins 
> (current LTS server on Linux), or am I going to end up with two distinct 
> user populations?
>
> THanks,
>
> Mike
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/acc45e1f-59ee-4e91-973c-43b796776950%40googlegroups.com.

Re: Using multiple AD servers

[Félix Belzunce Arcos]

I don't think you will end up with two different distinct user populations
unless you are doing something weird.

IIRC Jenkins stores in the user database what you use to log-in under the
username section. You can ensure by going to $JENKINS_HOME/users and
checking the format of the users over there.

I don't think SIDhistory or objectSID have any impact on Jenkins login - as
far as I can recall.

However, you should be able to quickly perform a proof of concepts.

El lun., 16 sept. 2019 a las 11:09, Mike Bayliss ()
escribió:

> Does anybody have experience with using multiple Active Directory servers?
>
> Specifically, we're looking a case where our users will gradually migrate
> from one AD domain to another, using a SIDhistory attribute in the new AD
> to match against the objectSID in the old AD. Is that supported by Jenkins
> (current LTS server on Linux), or am I going to end up with two distinct
> user populations?
>
> THanks,
>
> Mike
>
> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to jenkinsci-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jenkinsci-users/CAC-P8usaBvSJ96bgrtQHq8HWaW1fYJCCeMM63%2BJEvuesYQ-8Ug%40mail.gmail.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/CAHJmbpYyAywu2y0TomV%3DZs3bKAB0ECmwNUQFMRzHKWrzRdTquw%40mail.gmail.com.

Using multiple AD servers

[Mike Bayliss]

Does anybody have experience with using multiple Active Directory servers?

Specifically, we're looking a case where our users will gradually migrate
from one AD domain to another, using a SIDhistory attribute in the new AD
to match against the objectSID in the old AD. Is that supported by Jenkins
(current LTS server on Linux), or am I going to end up with two distinct
user populations?

THanks,

Mike

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/CAC-P8usaBvSJ96bgrtQHq8HWaW1fYJCCeMM63%2BJEvuesYQ-8Ug%40mail.gmail.com.