Strange and sudden failure from Jenkins ( Cannot log in using secure mode )

455 views

Skip to first unread message

TurboChargedDad

unread,

Feb 2, 2016, 7:46:05 PM2/2/16

to Jenkins Users

I inherited this setup and as a Linux engineer I have to admit that most of my windows knowledge has gone the way of the tape eraser to forehead.

I have :

Jenkins server (1.620) running as a service

Running on Windows Server 2008 Datacenter Edition

Apache (2.2) also running as a service.

Java 1.7x although 1.8 is also on the system the jenkins startup batch file call out 1.7

As far as I understand it, the apache server is setup as a proxy to the Jenkins server.

The Jenkins server used LDAP on the back end to talk to AD for user authentication.

Out of nowhere, users could no longer log in and the log files don't reveal much, but I am starting to think there may be an issue with log4j based on the output I pasted below.

There are also several messages related to some GlobalMatrixAuthorization defines. These errors don't make sense to me as the xml is consistent with the exception of some that don't seem to start on a new line like the others.

I was able to get in by disabling security but that doesn't help me much understand why it won't authenticate.

I can :

tracepath to the ldap server with no problem.

telnet to the ldap server on the correct port and I get a connection that sits there as I would expect it to.

Windows firewall is disabled completely

I can connect to localhost:8080 but still cannot auth.

IIS is installed but the web server portion is not.

Another odd thing is that the admin user I am using to log into the windows host itself is an AD account so I know the box itself can talk to AD.

I can't find any logs that would indicate what's going on here in regard to LDAP, if that's in fact the issue. Not can I find a good way to test ldap from a windoze machine.

Thanks in advance.

Feb 02, 2016 6:00:23 PM INFO org.eclipse.jetty.util.log.JavaUtilLog info

Started SelectChann...@0.0.0.0:8080

Feb 02, 2016 6:00:23 PM INFO winstone.Logger logInternal

Winstone Servlet Engine v2.0 running: controlPort=disabled

Feb 02, 2016 6:00:24 PM INFO jenkins.InitReactorRunner$1 onAttained

Started initialization

Feb 02, 2016 6:00:24 PM INFO jenkins.InitReactorRunner$1 onAttained

Listed all plugins

Feb 02, 2016 6:00:24 PM INFO hudson.plugins.greenballs.PluginImpl start

Green Balls!

Feb 02, 2016 6:00:24 PM INFO jenkins.InitReactorRunner$1 onAttained

Prepared all plugins

Feb 02, 2016 6:00:24 PM INFO jenkins.InitReactorRunner$1 onAttained

Started all plugins

Feb 02, 2016 6:00:25 PM INFO jenkins.InitReactorRunner$1 onAttained

Augmented all extensions

Feb 02, 2016 6:00:25 PM WARNING hudson.security.GlobalMatrixAuthorizationStrategy$ConverterImpl unmarshal

Skipping a non-existent permission

java.lang.IllegalArgumentException: Failed to parse 'hudson.model.Item.Move:djohn3' --- no such permission

at hudson.security.GlobalMatrixAuthorizationStrategy.add(GlobalMatrixAuthorizationStrategy.java:110)

at hudson.security.GlobalMatrixAuthorizationStrategy.access$200(GlobalMatrixAuthorizationStrategy.java:74)

at hudson.security.GlobalMatrixAuthorizationStrategy$ConverterImpl.unmarshal(GlobalMatrixAuthorizationStrategy.java:228)

at hudson.util.XStream2$AssociatedConverterImpl.unmarshal(XStream2.java:362)

at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:72)

at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:65)

at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:66)

at hudson.util.RobustReflectionConverter.unmarshalField(RobustReflectionConverter.java:349)

at hudson.util.RobustReflectionConverter.doUnmarshal(RobustReflectionConverter.java:289)

at hudson.util.RobustReflectionConverter.unmarshal(RobustReflectionConverter.java:228)

at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:72)

at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:65)

at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:66)

at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:50)

at com.thoughtworks.xstream.core.TreeUnmarshaller.start(TreeUnmarshaller.java:134)

at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.unmarshal(AbstractTreeMarshallingStrategy.java:32)

at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1189)

at hudson.util.XStream2.unmarshal(XStream2.java:113)

at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1173)

at hudson.XmlFile.unmarshal(XmlFile.java:163)

at jenkins.model.Jenkins$16.run(Jenkins.java:2644)

at org.jvnet.hudson.reactor.TaskGraphBuilder$TaskImpl.run(TaskGraphBuilder.java:169)

at org.jvnet.hudson.reactor.Reactor.runTask(Reactor.java:282)

at jenkins.model.Jenkins$7.runTask(Jenkins.java:905)

at org.jvnet.hudson.reactor.Reactor$2.run(Reactor.java:210)

at org.jvnet.hudson.reactor.Reactor$Node.run(Reactor.java:117)

at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

at java.lang.Thread.run(Thread.java:745)

Feb 02, 2016 6:00:25 PM WARNING hudson.security.GlobalMatrixAuthorizationStrategy$ConverterImpl unmarshal

Skipping a non-existent permission

java.lang.IllegalArgumentException: Failed to parse 'hudson.model.Item.Move:dsucka' --- no such permission