Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-15063

support for multiple security realms with failover

    Details

    • Similar Issues:

      Description

      It should be possible to configure multiple security realms at once with a specified order or preference.

      Examples of usage:
      failover between multiple ldap instances
      failover from ldap to basic auth

        Attachments

          Issue Links

            Activity

            Hide
            jglick Jesse Glick added a comment -

            This would need nontrivial changes in core in case existing SecurityRealm implementations sometimes assume they can checkcast the result of Jenkins.securityRealm, which I recall being the case. If not, in principle this could be done as a plugin defining a proxy implementation.

            Show
            jglick Jesse Glick added a comment - This would need nontrivial changes in core in case existing SecurityRealm implementations sometimes assume they can checkcast the result of Jenkins.securityRealm , which I recall being the case. If not, in principle this could be done as a plugin defining a proxy implementation.
            Hide
            sharon_kwok Sharon Kwok added a comment -

            It is seriously needed for automation. Hope that Jenkins could support.

            Show
            sharon_kwok Sharon Kwok added a comment - It is seriously needed for automation. Hope that Jenkins could support.
            Hide
            nemligtim Timothy Harris added a comment -

            Daniel Beck No reason to get your hackles up. Can I write code in Java? Yes. Do I know enough about the architecture of Jenkins to do this properly. No. Not without a lot of investment in time, which I do not have. Will my employer fund a plugin for this? No. 

            Where does that leave me, an advocate of Jenkins? On here hoping to highlight the need for this functionality. 

            Show
            nemligtim Timothy Harris added a comment - Daniel Beck No reason to get your hackles up. Can I write code in Java? Yes. Do I know enough about the architecture of Jenkins to do this properly. No. Not without a lot of investment in time, which I do not have. Will my employer fund a plugin for this? No.  Where does that leave me, an advocate of Jenkins? On here hoping to highlight the need for this functionality. 
            Hide
            jglick Jesse Glick added a comment -

            That is all to be expected. I would just ask that people use the Vote feature in JIRA rather than adding comments, unless the comment consists of genuinely novel suggestions. Otherwise popular issues wind up with dozens of “me too” comments.

            Show
            jglick Jesse Glick added a comment - That is all to be expected. I would just ask that people use the Vote feature in JIRA rather than adding comments, unless the comment consists of genuinely novel suggestions. Otherwise popular issues wind up with dozens of “me too” comments.
            Hide
            jglick Jesse Glick added a comment -

            which I recall being the case

            Examples like this or this are not hard to find. So making the realm proxyable would at a minimum require some logic changes to various popular realm plugins, and perhaps require new core APIs to permit adequate context / state to be “threaded” through various interfaces rather than grabbing it from a global singleton.

            Show
            jglick Jesse Glick added a comment - which I recall being the case Examples like this or this are not hard to find. So making the realm proxyable would at a minimum require some logic changes to various popular realm plugins, and perhaps require new core APIs to permit adequate context / state to be “threaded” through various interfaces rather than grabbing it from a global singleton.

              People

              • Assignee:
                Unassigned
                Reporter:
                liamjbennett liamjbennett
              • Votes:
                77 Vote for this issue
                Watchers:
                64 Start watching this issue

                Dates

                • Created:
                  Updated: