Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-27829

"authenticated" user role is not working after saml integration

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      Hi,
      We had ldap integration and "authenticated" user bit was working fine to assign role for the logged in user.
      However after SAML integration for SSO, "authenticated" user role stopped working without throwing any error.
      Role based strategy plugin is working fine for individual users but it is not working for authenticated users.

        Attachments

          Issue Links

            Activity

            Hide
            oleg_nenashev Oleg Nenashev added a comment - - edited

            Please follow the guide on https://wiki.jenkins-ci.org/display/JENKINS/How+to+report+an+issue
            An info about Jenkins core and SSO plugin versions is required

            Show
            oleg_nenashev Oleg Nenashev added a comment - - edited Please follow the guide on https://wiki.jenkins-ci.org/display/JENKINS/How+to+report+an+issue An info about Jenkins core and SSO plugin versions is required
            Hide
            vishal_vsh1 vishal sahasrabuddhe added a comment - - edited

            Hi Oleg, Sorry for incomplete information.

            Following is the detail information

            Jenkins version - 1.5.80.3
            Role bases strategy plugin version - 2.2.0
            SAML Plugin version - 0.3

            OS - ubuntu 10.04
            jenkins is running as service from its war.

            We have checked our SAML server which is working without issue for 8-10 other services, so i can say no issue from SSO server side.

            Show
            vishal_vsh1 vishal sahasrabuddhe added a comment - - edited Hi Oleg, Sorry for incomplete information. Following is the detail information Jenkins version - 1.5.80.3 Role bases strategy plugin version - 2.2.0 SAML Plugin version - 0.3 OS - ubuntu 10.04 jenkins is running as service from its war. We have checked our SAML server which is working without issue for 8-10 other services, so i can say no issue from SSO server side.
            Hide
            jburrows John Burrows added a comment -

            We are seeing the same behavior:

            Jenkins versions: 1.588, 1.601
            role-strategy-plugin version: 2.2.0
            SAML Plugin version: 0.3

            OS Windows 2008 R2 SP2
            Jenkins is running as Service on each Master Server.
            All SAML functions are working fine, role-strategy-plugin authenticated user id worked with OpenID plugin authenticating through Google, SAML plugin now authenticating through internal PingFederated server.

            Show
            jburrows John Burrows added a comment - We are seeing the same behavior: Jenkins versions: 1.588, 1.601 role-strategy-plugin version: 2.2.0 SAML Plugin version: 0.3 OS Windows 2008 R2 SP2 Jenkins is running as Service on each Master Server. All SAML functions are working fine, role-strategy-plugin authenticated user id worked with OpenID plugin authenticating through Google, SAML plugin now authenticating through internal PingFederated server.
            Hide
            vishal_vsh1 vishal sahasrabuddhe added a comment -

            Hi Oleg,
            Any idea when would it be possible for you to add the fix for same?

            Show
            vishal_vsh1 vishal sahasrabuddhe added a comment - Hi Oleg, Any idea when would it be possible for you to add the fix for same?
            Hide
            oleg_nenashev Oleg Nenashev added a comment -

            I've checked the behavior on my instance with SSO. Everything works well.
            Do you use SAML plugin? If yes, seems it's an issue in its SecurityRealm implementation. Added this plugin as a component.

            Show
            oleg_nenashev Oleg Nenashev added a comment - I've checked the behavior on my instance with SSO. Everything works well. Do you use SAML plugin? If yes, seems it's an issue in its SecurityRealm implementation. Added this plugin as a component.
            Hide
            jburrows John Burrows added a comment -

            Yes, SAML Plugin v0.3 authenticating against Ping Federated internal servers.

            Show
            jburrows John Burrows added a comment - Yes, SAML Plugin v0.3 authenticating against Ping Federated internal servers.
            Hide
            ifernandezcalvo Ivan Fernandez Calvo added a comment -

            It works correctly on 0.14

            Create a role

            Assign the role to the authenticated group

            Show
            ifernandezcalvo Ivan Fernandez Calvo added a comment - It works correctly on 0.14 Create a role Assign the role to the authenticated group

              People

              • Assignee:
                ifernandezcalvo Ivan Fernandez Calvo
                Reporter:
                vishal_vsh1 vishal sahasrabuddhe
              • Votes:
                1 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: