Authetication using LDAP and Local User

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
10 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Authetication using LDAP and Local User

Rodrigo Maccari

Hi All,

 

    I´m using the LDAP in order to authenticate the users in Jenkins, but I would like to allow an user outside of LDAP, also authenticate in Jenkins.

    I mean, execute the authentication trough LDAP and Jenkins own user database.

    Is it possible?

 

Thanks.

 

Rodrigo Maccari

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

RE: Authetication using LDAP and Local User

Dunnigan, Terrence J

I don’t know if you can do that. But I do know that you could support both users authenticated through LDAP and anonymous users. Perhaps that would work for you?

 

Terry

 

From: [hidden email] [mailto:[hidden email]] On Behalf Of Rodrigo Maccari
Sent: Thursday, August 28, 2014 4:04 PM
To: [hidden email]
Subject: Authetication using LDAP and Local User

 

Hi All,

 

    I´m using the LDAP in order to authenticate the users in Jenkins, but I would like to allow an user outside of LDAP, also authenticate in Jenkins.

    I mean, execute the authentication trough LDAP and Jenkins own user database.

    Is it possible?

 

Thanks.

 

Rodrigo Maccari

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authetication using LDAP and Local User

Rodrigo Maccari
Hi Terry,

     Thanks for your answer, but unfortunately I need to create several users outside of LDAP.

Regards,

Rodrigo Maccari


Em sexta-feira, 29 de agosto de 2014 00h14min40s UTC-3, Dunnigan, Terrence J escreveu:

I don’t know if you can do that. But I do know that you could support both users authenticated through LDAP and anonymous users. Perhaps that would work for you?

 

Terry

 

From: <a href="javascript:" target="_blank" gdf-obfuscated-mailto="xUDSyBe1rnYJ" onmousedown="this.href='javascript:';return true;" onclick="this.href='javascript:';return true;">jenkins...@googlegroups.com [mailto:<a href="javascript:" target="_blank" gdf-obfuscated-mailto="xUDSyBe1rnYJ" onmousedown="this.href='javascript:';return true;" onclick="this.href='javascript:';return true;">jenkins...@googlegroups.com] On Behalf Of Rodrigo Maccari
Sent: Thursday, August 28, 2014 4:04 PM
To: <a href="javascript:" target="_blank" gdf-obfuscated-mailto="xUDSyBe1rnYJ" onmousedown="this.href='javascript:';return true;" onclick="this.href='javascript:';return true;">jenkins...@googlegroups.com
Subject: Authetication using LDAP and Local User

 

Hi All,

 

    I´m using the LDAP in order to authenticate the users in Jenkins, but I would like to allow an user outside of LDAP, also authenticate in Jenkins.

    I mean, execute the authentication trough LDAP and Jenkins own user database.

    Is it possible?

 

Thanks.

 

Rodrigo Maccari

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to <a href="javascript:" target="_blank" gdf-obfuscated-mailto="xUDSyBe1rnYJ" onmousedown="this.href='javascript:';return true;" onclick="this.href='javascript:';return true;">jenkinsci-use...@googlegroups.com.
For more options, visit <a href="https://groups.google.com/d/optout" target="_blank" onmousedown="this.href='https://groups.google.com/d/optout';return true;" onclick="this.href='https://groups.google.com/d/optout';return true;">https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authetication using LDAP and Local User

Walter Kacynski
I have done this with no problems using the LDAP plugin and local users.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authetication using LDAP and Local User

Walter Kacynski
Well, maybe I should elaborate...  I have done this when the remote users is connecting via SSH with CLI commands.  I have not done this for an interactive user thru the GUI.


On Friday, August 29, 2014 12:06:25 PM UTC-4, Walter Kacynski wrote:
I have done this with no problems using the LDAP plugin and local users.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authetication using LDAP and Local User

Rodrigo Maccari
Hi Walter,

   Thanks for the help, but I need that users outside LDAP use the graphical interface.

Regards

Rodrigo

Em sexta-feira, 29 de agosto de 2014 13h09min39s UTC-3, Walter Kacynski escreveu:
Well, maybe I should elaborate...  I have done this when the remote users is connecting via SSH with CLI commands.  I have not done this for an interactive user thru the GUI.


On Friday, August 29, 2014 12:06:25 PM UTC-4, Walter Kacynski wrote:
I have done this with no problems using the LDAP plugin and local users.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authetication using LDAP and Local User

Robin Rosenberg-2


----- Ursprungligt meddelande -----
> Från: "Rodrigo Maccari" <[hidden email]>
> Till: [hidden email]
> Skickat: fredag, 29 aug 2014 18:19:47
> Ämne: Re: Authetication using LDAP and Local User
>
> Hi Walter,
>
>    Thanks for the help, but I need that users outside LDAP use the
> graphical interface.

If you are on Linux you should be able to use PAM and let the OS
authenticate the users.

See https://wiki.jenkins-ci.org/display/JENKINS/PAM+Authentication+Plugin

I have not experience with this plugin since all our necessary users are
i LDAP anyway.

-- robin

> Regards
>
> Rodrigo
>
> Em sexta-feira, 29 de agosto de 2014 13h09min39s UTC-3, Walter Kacynski
> escreveu:
> >
> > Well, maybe I should elaborate...  I have done this when the remote users
> > is connecting via SSH with CLI commands.  I have not done this for an
> > interactive user thru the GUI.
> >
> >
> > On Friday, August 29, 2014 12:06:25 PM UTC-4, Walter Kacynski wrote:
> >>
> >> I have done this with no problems using the LDAP plugin and local users.
> >>
> >
>
> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [hidden email].
> For more options, visit https://groups.google.com/d/optout.
>

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authetication using LDAP and Local User

Rodrigo Maccari
Hi Robin,

   Thanks for your suggestion, I used the PAM and it worked!

2014-08-30 5:47 GMT-03:00 Robin Rosenberg <[hidden email]>:

>
>
> ----- Ursprungligt meddelande -----
>> Från: "Rodrigo Maccari" <[hidden email]>
>> Till: [hidden email]
>> Skickat: fredag, 29 aug 2014 18:19:47
>> Ämne: Re: Authetication using LDAP and Local User
>>
>> Hi Walter,
>>
>>    Thanks for the help, but I need that users outside LDAP use the
>> graphical interface.
>
> If you are on Linux you should be able to use PAM and let the OS
> authenticate the users.
>
> See https://wiki.jenkins-ci.org/display/JENKINS/PAM+Authentication+Plugin
>
> I have not experience with this plugin since all our necessary users are
> i LDAP anyway.
>
> -- robin
>
>> Regards
>>
>> Rodrigo
>>
>> Em sexta-feira, 29 de agosto de 2014 13h09min39s UTC-3, Walter Kacynski
>> escreveu:
>> >
>> > Well, maybe I should elaborate...  I have done this when the remote users
>> > is connecting via SSH with CLI commands.  I have not done this for an
>> > interactive user thru the GUI.
>> >
>> >
>> > On Friday, August 29, 2014 12:06:25 PM UTC-4, Walter Kacynski wrote:
>> >>
>> >> I have done this with no problems using the LDAP plugin and local users.
>> >>
>> >
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Jenkins Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [hidden email].
>> For more options, visit https://groups.google.com/d/optout.
>>
>
> --
> You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
> For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authetication using LDAP and Local User

Olivier Dupré
Hi Rodrigo,

This sounds great. So I tried to do the same and it simply...does not work.

Please could you elaborate a little bit and let me/us know how exactly you did this?

Cheers,
Olivier.
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authetication using LDAP and Local User

maniankara
This post has NOT been accepted by the mailing list yet.
I don't know if this is still useful, but I had the same problem and managed to fix it recently.
Might be of help for someone.
1. Get LDAP authentication working from shell (ssh)
2. Install "PAM authentication" plugin if its not installed.
3. Then enable "Unix user/group database" from Configure Global security -> Access Control -> Security Realm.
4. Optionally add+configure matrix based security or "Logged in users can do anything"

Thanks,
 - Anoop :)
Loading...