Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-3590

Hudson build-in user management creates a user for each failed login

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Component/s: other
    • Labels:
      None
    • Environment:
      Platform: All, OS: Windows XP

      Description

      i'm using the build-in user management from hudson. Every user can do everything
      when he is logged in. If somebody enters a username that does not exists the
      login fails as expected. However this user gets added on the user list an can
      only be deleted by restarting hudson (so i'm guessing hudson holds him in the
      memory)

        Activity

        Hide
        mindless Alan Harder added a comment -

        started

        Show
        mindless Alan Harder added a comment - started
        Hide
        scm_issue_link SCM/JIRA link daemon added a comment -

        Code changed in hudson
        User: : mindless
        Path:
        trunk/hudson/main/core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java
        http://fisheye4.cenqua.com/changelog/hudson/?cs=19411
        Log:
        [FIXED JENKINS-3590] don't create new in-memory user when someone attempts
        login with invalid username

        Show
        scm_issue_link SCM/JIRA link daemon added a comment - Code changed in hudson User: : mindless Path: trunk/hudson/main/core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java http://fisheye4.cenqua.com/changelog/hudson/?cs=19411 Log: [FIXED JENKINS-3590] don't create new in-memory user when someone attempts login with invalid username
        Hide
        scm_issue_link SCM/JIRA link daemon added a comment -

        Code changed in hudson
        User: : mindless
        Path:
        trunk/hudson/main/core/src/main/java/hudson/model/User.java
        http://fisheye4.cenqua.com/changelog/hudson/?cs=19412
        Log:
        JENKINS-3590 load user when create flag is false if user has a config file
        (this should not be considered "creating" the user), so login works even if
        User.getAll has not yet been called. fixes regression from r19411

        Show
        scm_issue_link SCM/JIRA link daemon added a comment - Code changed in hudson User: : mindless Path: trunk/hudson/main/core/src/main/java/hudson/model/User.java http://fisheye4.cenqua.com/changelog/hudson/?cs=19412 Log: JENKINS-3590 load user when create flag is false if user has a config file (this should not be considered "creating" the user), so login works even if User.getAll has not yet been called. fixes regression from r19411

          People

          • Assignee:
            mindless Alan Harder
            Reporter:
            kukudas kukudas
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: