Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-62571

Upgrading from Jenkins 1.640 to Jenkins 2.222.4 LTS results in com.thoughtworks.xstream.converters.ConversionException: Refusing to unmarshal securityRealm for security reasons; see https://jenkins.io/redirect/class-filter/

    Details

    • Type: Bug
    • Status: Open (View Workflow)
    • Priority: Major
    • Resolution: Unresolved
    • Component/s: core
    • Labels:
    • Environment:
      Production: Installed revision : Jenkins 1.640;
      Qualification: Installed revision : Jenkins 2.222.4 LTS;
      Interacting with Jenkins via the web interface
    • Similar Issues:

      Description

      Coq currently has Jenkins 1.640 installed on its production server.  I am attempting to upgrade this to Jenkins 2.222.4 LTS via the web management interface at https://ci.inria.fr/project/coq/cisoftware.  I have installed Jenkins 2.222.4 LTS on the Qualification sever via the web interface, and then I clicked the "Setup => Qualification" button under "Synchronization".  After waiting a bit, I get the following error when I visit any page in the Qualification server:

      com.thoughtworks.xstream.converters.ConversionException: Refusing to unmarshal securityRealm for security reasons; see https://jenkins.io/redirect/class-filter/
      ---- Debugging information ----
      class : hudson.security.LDAPSecurityRealm
      required-type : hudson.security.LDAPSecurityRealm
      converter-type : hudson.util.XStream2$BlacklistedTypesConverter
      path : /hudson/securityRealm
      line number : 25
      -------------------------------
      at hudson.util.XStream2$BlacklistedTypesConverter.unmarshal(XStream2.java:546)
      at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:72)
      at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:65)
      at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:66)
      at hudson.util.RobustReflectionConverter.unmarshalField(RobustReflectionConverter.java:390)
      at hudson.util.RobustReflectionConverter.doUnmarshal(RobustReflectionConverter.java:328)
      Caused: jenkins.util.xstream.CriticalXStreamException: Refusing to unmarshal securityRealm for security reasons; see https://jenkins.io/redirect/class-filter/
      ---- Debugging information ----
      class : hudson.security.LDAPSecurityRealm
      required-type : hudson.security.LDAPSecurityRealm
      converter-type : hudson.util.XStream2$BlacklistedTypesConverter
      path : /hudson/securityRealm
      line number : 25
      ------------------------------- : Refusing to unmarshal securityRealm for security reasons; see https://jenkins.io/redirect/class-filter/
      ---- Debugging information ----
      class : hudson.security.LDAPSecurityRealm
      required-type : hudson.security.LDAPSecurityRealm
      converter-type : hudson.util.XStream2$BlacklistedTypesConverter
      path : /hudson/securityRealm
      line number : 25
      -------------------------------
      message : Refusing to unmarshal securityRealm for security reasons; see https://jenkins.io/redirect/class-filter/
      ---- Debugging information ----
      class : hudson.security.LDAPSecurityRealm
      required-type : hudson.security.LDAPSecurityRealm
      converter-type : hudson.util.XStream2$BlacklistedTypesConverter
      path : /hudson/securityRealm
      line number : 25
      -------------------------------
      cause-exception : com.thoughtworks.xstream.converters.ConversionException
      cause-message : Refusing to unmarshal securityRealm for security reasons; see https://jenkins.io/redirect/class-filter/
      class : hudson.model.Hudson
      required-type : hudson.security.LDAPSecurityRealm
      converter-type : hudson.util.RobustReflectionConverter
      path : /hudson/securityRealm
      line number : 25
      version : not available
      -------------------------------
      at hudson.util.RobustReflectionConverter.doUnmarshal(RobustReflectionConverter.java:353)
      at hudson.util.RobustReflectionConverter.unmarshal(RobustReflectionConverter.java:267)
      at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:72)
      at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:65)
      at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:66)
      at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:50)
      at com.thoughtworks.xstream.core.TreeUnmarshaller.start(TreeUnmarshaller.java:134)
      at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.unmarshal(AbstractTreeMarshallingStrategy.java:32)
      at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1189)
      at hudson.util.XStream2.unmarshal(XStream2.java:161)
      at hudson.util.XStream2.unmarshal(XStream2.java:132)
      at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1173)
      at hudson.XmlFile.unmarshal(XmlFile.java:180)
      Caused: java.io.IOException: Unable to read /net/www/ci/coq-qualif/config.xml
      at hudson.XmlFile.unmarshal(XmlFile.java:183)
      at hudson.XmlFile.unmarshal(XmlFile.java:163)
      at jenkins.model.Jenkins.loadConfig(Jenkins.java:3118)
      at jenkins.model.Jenkins.access$1200(Jenkins.java:320)
      at jenkins.model.Jenkins$13.run(Jenkins.java:3219)
      at org.jvnet.hudson.reactor.TaskGraphBuilder$TaskImpl.run(TaskGraphBuilder.java:169)
      at org.jvnet.hudson.reactor.Reactor.runTask(Reactor.java:296)
      at jenkins.model.Jenkins$5.runTask(Jenkins.java:1133)
      at org.jvnet.hudson.reactor.Reactor$2.run(Reactor.java:214)
      at org.jvnet.hudson.reactor.Reactor$Node.run(Reactor.java:117)
      at jenkins.security.ImpersonatingExecutorService$1.run(ImpersonatingExecutorService.java:59)
      at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
      at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
      at java.lang.Thread.run(Thread.java:748)
      Caused: org.jvnet.hudson.reactor.ReactorException
      at org.jvnet.hudson.reactor.Reactor.execute(Reactor.java:282)
      at jenkins.InitReactorRunner.run(InitReactorRunner.java:50)
      at jenkins.model.Jenkins.executeReactor(Jenkins.java:1166)
      at jenkins.model.Jenkins.<init>(Jenkins.java:966)
      at hudson.model.Hudson.<init>(Hudson.java:85)
      at hudson.model.Hudson.<init>(Hudson.java:81)
      at hudson.WebAppMain$3.run(WebAppMain.java:233)
      Caused: hudson.util.HudsonFailedToLoad
      at hudson.WebAppMain$3.run(WebAppMain.java:250)

        Attachments

          Activity

          Hide
          oleg_nenashev Oleg Nenashev added a comment -

          Please provide a version of the LDAP plugin. 

          Show
          oleg_nenashev Oleg Nenashev added a comment - Please provide a version of the LDAP plugin. 
          Hide
          jasongross Jason Gross added a comment -

          How do I discover the version of the LDAP plugin? I cannot access it via the web interface, because even https://ci.inria.fr/coq-qualif/pluginManager/ gives this error message. The production server, which I copied the configuration from, has LDAP plugin version 1.11. (Note also that the web interface gives me no way to downgrade the Jenkins version of the qualification server, and no way to update any of the plugins, so it seems my hands are fully tied...)

          Show
          jasongross Jason Gross added a comment - How do I discover the version of the LDAP plugin? I cannot access it via the web interface, because even https://ci.inria.fr/coq-qualif/pluginManager/ gives this error message. The production server, which I copied the configuration from, has LDAP plugin version 1.11. (Note also that the web interface gives me no way to downgrade the Jenkins version of the qualification server, and no way to update any of the plugins, so it seems my hands are fully tied...)

            People

            • Assignee:
              Unassigned
              Reporter:
              jasongross Jason Gross
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: