How to install Windows JNLP service when Jenkins security is on?

[Costin Caraivan]

Hello,

After configuring security for the master Jenkins only offers the headless command as an options. This means that the window which offers the service installation menu is not available.

How can the Windows service be installed in this setup? (jenkins-service.exe --install, copied from another slave? - sounds like a hack if that's the only option :( ).

Thank you,

_____________
Costin Caraivan

[Eric Pyle]

How did you configure security? If it is matrix-based or project-based
matrix, check your user permissions for slaves. Do you have all permissions?

Eric

> --
> You received this message because you are subscribed to the Google
> Groups "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to jenkinsci-use...@googlegroups.com.
> For more options, visit https://groups.google.com/groups/opt_out.
>
>

[Costin Caraivan]

Hello,

AD integration, logged in users can do anything.

When I created the node the node page gave me a java command with -jar/-jnlpUrl/-security as the headless option and the some other options available for JNLP. Once security was turned on those options were gone and the only option left was the headless one.

I think I should file this as a feature request since it's not very intuitive to create a JNLP slave when you have no security, install it as a Windows service, and then copy its folder around when you have security turned on.

It might be even considered a bug since you cannot install a Windows service for a JNLP slave once you have turned on security. You will only have the option to run the command Jenkins gave you, presumably at start up, or create/use a Java service wrapper from somewhere. Doable, but definitely newbie-unfriendly :)

As a side topic - on what is the node secret key based? If the VM hosting the slave changes but its IP and hostname remain the same, can the key be reused?

Regards,
Costin.

On Mon, May 13, 2013 at 7:23 PM, Eric Pyle <eric...@cd-adapco.com> wrote:

How did you configure security? If it is matrix-based or project-based matrix, check your user permissions for slaves. Do you have all permissions?

Eric

On 5/13/2013 10:29 AM, Costin Caraivan wrote:

Hello,

After configuring security for the master Jenkins only offers the headless command as an options. This means that the window which offers the service installation menu is not available.

How can the Windows service be installed in this setup? (jenkins-service.exe --install, copied from another slave? - sounds like a hack if that's the only option :( ).

Thank you,
_____________
Costin Caraivan

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.

For more options, visit https://groups.google.com/groups/opt_out.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.

For more options, visit https://groups.google.com/groups/opt_out.

--
_____________
Costin Caraivan

[k.thi...@comcast.net]

Currently it sounds like my security setup is the same as yours Constin.  I have AD enabled and set to Logged in Users can do anything.

 

I still get the option to lauch with the JNLP agent and then install it as a Windows service. 

 

What do you have it set to for "Launch method" in the configuration of the node?  Mine are set to "Launch slave via Java Web Start"

---

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.

[Bill Wonch]

I had to make some changes to the arguments section of my slave-config.xml:

<arguments>-server -Xms1024m -Xmx1024m -XX:PermSize=256m -XX:MaxPermSize=256m -XX:+UseG1GC -XX:+AggressiveOpts -jar "%BASE%\slave.jar" -jnlpUrl http://jenkins/computer/Win2k3Server-heqdeviaunv02-32bit/slave-agent.jnlp -classpath "%BASE%\lib\commons-codec-1.5.jar" -jnlpCredentials username:password</arguments> 

the classpath update was something I had to download separately and the slave wouldn't start without it.

The jnlpCredentials should be anything that can authenticate against your active directory and has permissions on the server.  I'd suggest a service/faceless account of some sort.

Hope this helps!

Bill