Role-based Authorization Strategy Plugin groups not working

209 views
Skip to first unread message

Shaun Megaw

unread,
Jan 30, 2020, 2:03:33 PM1/30/20
to Jenkinsci-users
Hi
I have setup Role-based Authorization Strategy Plugin. If I select
users it works, however if I select our AD groups, users on that group
have no permissions

In Global roles, I add the group, and can see t has the group icon to
the right, and ticked it's access rights (admin), however users on
that group are not getting any permissions once logged in

I have checked that the users exist on the group with ldap search

Please advise

Lagerburg Tim (RBRO/ESA2)

unread,
Jan 30, 2020, 5:02:59 PM1/30/20
to jenkins...@googlegroups.com
Hello,

If you test the LDAP settings, does it return a list of users the user you used to test (use the test function inside the LDAP config) the user is a member of?
--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAM4cNySFQCbf-Wa3kDdyomsZRcwja0Lo6%3DaiRq1hfY84HEvemQ%40mail.gmail.com.

Shaun Megaw

unread,
Jan 30, 2020, 6:06:30 PM1/30/20
to jenkins...@googlegroups.com
Thank you fort he reply. The users don return. If I use employee numbers it is even able to resolve the names,


On Thursday, January 30, 2020, 'Lagerburg Tim (RBRO/ESA2)' via Jenkins Users <jenkins...@googlegroups.com> wrote:
Hello,

If you test the LDAP settings, does it return a list of users the user you used to test (use the test function inside the LDAP config) the user is a member of?


-----Original Message-----
From: jenkinsci-users@googlegroups.com <jenkinsci-users@googlegroups.com> On Behalf Of Shaun Megaw
Sent: 30 January 2020 12:56
To: Jenkinsci-users <Jenkinsci-users@googlegroups.com>
Subject: Role-based Authorization Strategy Plugin groups not working

Hi
I have setup Role-based Authorization Strategy Plugin. If I select users it works, however if I select our AD groups, users on that group have no permissions

In Global roles, I add the group, and can see t has the group icon to the right, and ticked it's access rights (admin), however users on that group are not getting any permissions once logged in

I have checked that the users exist on the group with ldap search

Please advise

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.
--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/1bbba155d0aa429aa27085b99c250c08%40ro.bosch.com.

Lagerburg Tim (RBRO/ESA2)

unread,
Jan 30, 2020, 6:07:26 PM1/30/20
to jenkins...@googlegroups.com

Sorry, I meant does it return the groups the user is a member of

From: jenkins...@googlegroups.com <jenkins...@googlegroups.com> On Behalf Of Shaun Megaw
Sent: 30 January 2020 20:06
To: jenkins...@googlegroups.com
Subject: Re: Role-based Authorization Strategy Plugin groups not working

 

Thank you fort he reply. The users don return. If I use employee numbers it is even able to resolve the names,

On Thursday, January 30, 2020, 'Lagerburg Tim (RBRO/ESA2)' via Jenkins Users <jenkins...@googlegroups.com> wrote:

Hello,

If you test the LDAP settings, does it return a list of users the user you used to test (use the test function inside the LDAP config) the user is a member of?


-----Original Message-----
From: jenkins...@googlegroups.com <jenkins...@googlegroups.com> On Behalf Of Shaun Megaw
Sent: 30 January 2020 12:56
To: Jenkinsci-users <Jenkins...@googlegroups.com>
Subject: Role-based Authorization Strategy Plugin groups not working

Hi
I have setup Role-based Authorization Strategy Plugin. If I select users it works, however if I select our AD groups, users on that group have no permissions

In Global roles, I add the group, and can see t has the group icon to the right, and ticked it's access rights (admin), however users on that group are not getting any permissions once logged in

I have checked that the users exist on the group with ldap search

Please advise

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.


To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAM4cNySFQCbf-Wa3kDdyomsZRcwja0Lo6%3DaiRq1hfY84HEvemQ%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.

--

You received this message because you are subscribed to the Google Groups "Jenkins Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAM4cNySKgtWmyRghRqFiAqd6gv%2Bnya7DQLhCmKCpz31J_-dc4A%40mail.gmail.com.

Shaun Megaw

unread,
Jan 30, 2020, 6:58:12 PM1/30/20
to jenkins...@googlegroups.com
Yes, if I add the suffix /whoAmI/ to my Jenkins url I can see the groups my user belongs to. All the other users in that group have no permissions (I added my user to admin role to configure Jenkins 


On Thursday, January 30, 2020, 'Lagerburg Tim (RBRO/ESA2)' via Jenkins Users <jenkins...@googlegroups.com> wrote:

Sorry, I meant does it return the groups the user is a member of

From: jenkinsci-users@googlegroups.com <jenkinsci-users@googlegroups.com> On Behalf Of Shaun Megaw
Sent: 30 January 2020 20:06
To: jenkinsci-users@googlegroups.com
Subject: Re: Role-based Authorization Strategy Plugin groups not working

 

Thank you fort he reply. The users don return. If I use employee numbers it is even able to resolve the names,

On Thursday, January 30, 2020, 'Lagerburg Tim (RBRO/ESA2)' via Jenkins Users <jenkinsci-users@googlegroups.com> wrote:

Hello,

If you test the LDAP settings, does it return a list of users the user you used to test (use the test function inside the LDAP config) the user is a member of?


-----Original Message-----
From: jenkinsci-users@googlegroups.com <jenkinsci-users@googlegroups.com> On Behalf Of Shaun Megaw
Sent: 30 January 2020 12:56
To: Jenkinsci-users <Jenkinsci-users@googlegroups.com>
Subject: Role-based Authorization Strategy Plugin groups not working

Hi
I have setup Role-based Authorization Strategy Plugin. If I select users it works, however if I select our AD groups, users on that group have no permissions

In Global roles, I add the group, and can see t has the group icon to the right, and ticked it's access rights (admin), however users on that group are not getting any permissions once logged in

I have checked that the users exist on the group with ldap search

Please advise

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.


To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAM4cNySFQCbf-Wa3kDdyomsZRcwja0Lo6%3DaiRq1hfY84HEvemQ%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/16bdda6394534b0eb403b39efbc2604d%40ro.bosch.com.

Shaun Megaw

unread,
Jan 30, 2020, 7:07:58 PM1/30/20
to jenkins...@googlegroups.com
Fixed. Case sensitive group names. Copied from the /whoAmI/ suffix and working. Thanks for the help


On Thursday, January 30, 2020, 'Lagerburg Tim (RBRO/ESA2)' via Jenkins Users <jenkins...@googlegroups.com> wrote:

Sorry, I meant does it return the groups the user is a member of

From: jenkinsci-users@googlegroups.com <jenkinsci-users@googlegroups.com> On Behalf Of Shaun Megaw
Sent: 30 January 2020 20:06
To: jenkinsci-users@googlegroups.com
Subject: Re: Role-based Authorization Strategy Plugin groups not working

 

Thank you fort he reply. The users don return. If I use employee numbers it is even able to resolve the names,

On Thursday, January 30, 2020, 'Lagerburg Tim (RBRO/ESA2)' via Jenkins Users <jenkinsci-users@googlegroups.com> wrote:

Hello,

If you test the LDAP settings, does it return a list of users the user you used to test (use the test function inside the LDAP config) the user is a member of?


-----Original Message-----
From: jenkinsci-users@googlegroups.com <jenkinsci-users@googlegroups.com> On Behalf Of Shaun Megaw
Sent: 30 January 2020 12:56
To: Jenkinsci-users <Jenkinsci-users@googlegroups.com>
Subject: Role-based Authorization Strategy Plugin groups not working

Hi
I have setup Role-based Authorization Strategy Plugin. If I select users it works, however if I select our AD groups, users on that group have no permissions

In Global roles, I add the group, and can see t has the group icon to the right, and ticked it's access rights (admin), however users on that group are not getting any permissions once logged in

I have checked that the users exist on the group with ldap search

Please advise

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.


To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAM4cNySFQCbf-Wa3kDdyomsZRcwja0Lo6%3DaiRq1hfY84HEvemQ%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/16bdda6394534b0eb403b39efbc2604d%40ro.bosch.com.
Reply all
Reply to author
Forward
0 new messages