Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-3590

Hudson build-in user management creates a user for each failed login

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Component/s: other
    • Labels:
      None
    • Environment:
      Platform: All, OS: Windows XP
    • Similar Issues:

      Description

      i'm using the build-in user management from hudson. Every user can do everything
      when he is logged in. If somebody enters a username that does not exists the
      login fails as expected. However this user gets added on the user list an can
      only be deleted by restarting hudson (so i'm guessing hudson holds him in the
      memory)

        Attachments

          Activity

          Hide
          mindless Alan Harder added a comment -

          started

          Show
          mindless Alan Harder added a comment - started
          Hide
          scm_issue_link SCM/JIRA link daemon added a comment -

          Code changed in hudson
          User: : mindless
          Path:
          trunk/hudson/main/core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java
          http://fisheye4.cenqua.com/changelog/hudson/?cs=19411
          Log:
          [FIXED JENKINS-3590] don't create new in-memory user when someone attempts
          login with invalid username

          Show
          scm_issue_link SCM/JIRA link daemon added a comment - Code changed in hudson User: : mindless Path: trunk/hudson/main/core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java http://fisheye4.cenqua.com/changelog/hudson/?cs=19411 Log: [FIXED JENKINS-3590] don't create new in-memory user when someone attempts login with invalid username
          Hide
          scm_issue_link SCM/JIRA link daemon added a comment -

          Code changed in hudson
          User: : mindless
          Path:
          trunk/hudson/main/core/src/main/java/hudson/model/User.java
          http://fisheye4.cenqua.com/changelog/hudson/?cs=19412
          Log:
          JENKINS-3590 load user when create flag is false if user has a config file
          (this should not be considered "creating" the user), so login works even if
          User.getAll has not yet been called. fixes regression from r19411

          Show
          scm_issue_link SCM/JIRA link daemon added a comment - Code changed in hudson User: : mindless Path: trunk/hudson/main/core/src/main/java/hudson/model/User.java http://fisheye4.cenqua.com/changelog/hudson/?cs=19412 Log: JENKINS-3590 load user when create flag is false if user has a config file (this should not be considered "creating" the user), so login works even if User.getAll has not yet been called. fixes regression from r19411

            People

            • Assignee:
              mindless Alan Harder
              Reporter:
              kukudas kukudas
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: