Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-9774

Enabling "Project Matrix Authorization Strategy" without checking any permissions causes config.xml parsing to fail

    Details

    • Similar Issues:

      Description

      The config.xml:
      <?xml version='1.0' encoding='UTF-8'?>
      <hudson>
      <version>1.413</version>
      <numExecutors>2</numExecutors>
      <mode>NORMAL</mode>
      <useSecurity>true</useSecurity>
      <authorizationStrategy class="hudson.security.ProjectMatrixAuthorizationStrategy" /> <!-- This is the offending line. -->
      <securityRealm class="hudson.security.HudsonPrivateSecurityRealm">
      <disableSignup>false</disableSignup>
      </securityRealm>
      <markupFormatter class="hudson.markup.RawHtmlMarkupFormatter"/>
      [...snip...]

      The backtrace on startup:
      org.jvnet.hudson.reactor.ReactorException: hudson.util.IOException2: Unable to read /var/lib/jenkins/config.xml
      at org.jvnet.hudson.reactor.Reactor.execute(Reactor.java:246)
      at hudson.model.Hudson.executeReactor(Hudson.java:753)
      at hudson.model.Hudson.<init>(Hudson.java:667)
      at hudson.model.Hudson.<init>(Hudson.java:607)
      at hudson.WebAppMain$2.run(WebAppMain.java:215)
      Caused by: hudson.util.IOException2: Unable to read /var/lib/jenkins/config.xml
      at hudson.XmlFile.unmarshal(XmlFile.java:152)
      at hudson.model.Hudson$12.run(Hudson.java:2340)
      at org.jvnet.hudson.reactor.TaskGraphBuilder$TaskImpl.run(TaskGraphBuilder.java:146)
      at org.jvnet.hudson.reactor.Reactor.runTask(Reactor.java:259)
      at hudson.model.Hudson$4.runTask(Hudson.java:735)
      at org.jvnet.hudson.reactor.Reactor$2.run(Reactor.java:187)
      at org.jvnet.hudson.reactor.Reactor$Node.run(Reactor.java:94)
      at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)
      at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)
      at java.lang.Thread.run(Thread.java:636)
      Caused by: com.thoughtworks.xstream.converters.ConversionException: only START_TAG can have attributes END_TAG seen ...tegy class="hudson.security.ProjectMatrixAuthorizationStrategy" />... @7:87 : only START_TAG can have attributes END_TAG seen ...tegy class="hudson.security.ProjectMatrixAuthorizationStrategy" />... @7:87
      ---- Debugging information ----
      message : only START_TAG can have attributes END_TAG seen ...tegy class="hudson.security.ProjectMatrixAuthorizationStrategy" />... @7:87
      cause-exception : java.lang.IndexOutOfBoundsException
      cause-message : only START_TAG can have attributes END_TAG seen ...tegy class="hudson.security.ProjectMatrixAuthorizationStrategy" />... @7:87
      class : hudson.model.Hudson
      required-type : hudson.security.ProjectMatrixAuthorizationStrategy
      path : /hudson/authorizationStrategy
      line number : 7
      -------------------------------
      at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:89)
      at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:63)
      at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:76)
      at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:60)
      at hudson.util.RobustReflectionConverter.unmarshalField(RobustReflectionConverter.java:290)
      at hudson.util.RobustReflectionConverter.doUnmarshal(RobustReflectionConverter.java:233)
      at hudson.util.RobustReflectionConverter.unmarshal(RobustReflectionConverter.java:180)
      at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:82)
      at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:63)
      at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:76)
      at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:60)
      at com.thoughtworks.xstream.core.TreeUnmarshaller.start(TreeUnmarshaller.java:137)
      at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.unmarshal(AbstractTreeMarshallingStrategy.java:33)
      at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:926)
      at hudson.util.XStream2.unmarshal(XStream2.java:80)
      at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:912)
      at hudson.XmlFile.unmarshal(XmlFile.java:148)
      ... 9 more
      Caused by: java.lang.IndexOutOfBoundsException: only START_TAG can have attributes END_TAG seen ...tegy class="hudson.security.ProjectMatrixAuthorizationStrategy" />... @7:87
      at org.xmlpull.mxp1.MXParser.getAttributeValue(MXParser.java:927)
      at com.thoughtworks.xstream.io.xml.XppReader.getAttribute(XppReader.java:93)
      at com.thoughtworks.xstream.io.ReaderWrapper.getAttribute(ReaderWrapper.java:56)
      at hudson.util.RobustReflectionConverter.instantiateNewInstance(RobustReflectionConverter.java:324)
      at hudson.util.RobustReflectionConverter.unmarshal(RobustReflectionConverter.java:179)
      at hudson.security.ProjectMatrixAuthorizationStrategy$ConverterImpl.unmarshal(ProjectMatrixAuthorizationStrategy.java:119)
      at hudson.util.XStream2$AssociatedConverterImpl.unmarshal(XStream2.java:224)
      at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:82)
      ... 25 more

        Attachments

          Issue Links

            Activity

            davidstrauss davidstrauss created issue -
            Hide
            melvinbautista melvin bautista added a comment -

            same issue here. i think you must remove the jenkins to your server or unisntall jenkins then install it again. )

            Show
            melvinbautista melvin bautista added a comment - same issue here. i think you must remove the jenkins to your server or unisntall jenkins then install it again. )
            Hide
            danielbeck Daniel Beck added a comment -

            What exactly is the desired behavior here? That Jenkins does not even accept the new configuration when you save it? Because you will lock yourself and everyone else out.

            Show
            danielbeck Daniel Beck added a comment - What exactly is the desired behavior here? That Jenkins does not even accept the new configuration when you save it? Because you will lock yourself and everyone else out.
            Show
            danielbeck Daniel Beck added a comment - Related: https://wiki.jenkins-ci.org/display/JENKINS/Disable+security
            Hide
            mickael Mickael Ange added a comment -

            Hi,

            I have 2 Jenkins instances in testing (1.565.3) with a unique administrator account for username mickael. I configured "Project-based Matrix Authorization Strategy" on both and I don't know why (maybe my bad during the process), one instance failed to restart after installing thinBackup plugin from CLI.

            Oct 06, 2014 11:50:16 AM hudson.util.BootFailure publish
            SEVERE: Failed to initialize Jenkins
            hudson.util.HudsonFailedToLoad: org.jvnet.hudson.reactor.ReactorException: java.io.IOException: Unable to read /var/lib/jenkins/config.xml
            	at hudson.WebAppMain$3.run(WebAppMain.java:234)
            Caused by: org.jvnet.hudson.reactor.ReactorException: java.io.IOException: Unable to read /var/lib/jenkins/config.xml
            	at org.jvnet.hudson.reactor.Reactor.execute(Reactor.java:269)
            	at jenkins.InitReactorRunner.run(InitReactorRunner.java:44)
            	at jenkins.model.Jenkins.executeReactor(Jenkins.java:916)
            	at jenkins.model.Jenkins.<init>(Jenkins.java:815)
            	at hudson.model.Hudson.<init>(Hudson.java:82)
            	at hudson.model.Hudson.<init>(Hudson.java:78)
            	at hudson.WebAppMain$3.run(WebAppMain.java:222)
            Caused by: java.io.IOException: Unable to read /var/lib/jenkins/config.xml
            	at hudson.XmlFile.unmarshal(XmlFile.java:165)
            	at jenkins.model.Jenkins$17.run(Jenkins.java:2565)
            	at org.jvnet.hudson.reactor.TaskGraphBuilder$TaskImpl.run(TaskGraphBuilder.java:169)
            	at org.jvnet.hudson.reactor.Reactor.runTask(Reactor.java:282)
            	at jenkins.model.Jenkins$7.runTask(Jenkins.java:905)
            	at org.jvnet.hudson.reactor.Reactor$2.run(Reactor.java:210)
            	at org.jvnet.hudson.reactor.Reactor$Node.run(Reactor.java:117)
            	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
            	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
            	at java.lang.Thread.run(Thread.java:745)
            Caused by: com.thoughtworks.xstream.converters.ConversionException: only START_TAG can have attributes END_TAG seen ...ategy class="hudson.security.ProjectMatrixAuthorizationStrategy"/>... @8:86 : only START_TAG can have attributes END_TAG seen ...ategy class="hudson.security.ProjectMatrixAuthorizationStrategy"/>... @8:86
            ---- Debugging information ----
            message             : only START_TAG can have attributes END_TAG seen ...ategy class="hudson.security.ProjectMatrixAuthorizationStrategy"/>... @8:86
            cause-exception     : java.lang.IndexOutOfBoundsException
            cause-message       : only START_TAG can have attributes END_TAG seen ...ategy class="hudson.security.ProjectMatrixAuthorizationStrategy"/>... @8:86
            class               : hudson.security.ProjectMatrixAuthorizationStrategy
            required-type       : hudson.security.ProjectMatrixAuthorizationStrategy
            converter-type      : hudson.util.XStream2$AssociatedConverterImpl
            path                : /hudson/authorizationStrategy
            line number         : 8
            class[1]            : hudson.model.Hudson
            converter-type[1]   : hudson.util.RobustReflectionConverter
            version             : not available
            -------------------------------
            	at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:79)
            	at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:65)
            	at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:66)
            	at hudson.util.RobustReflectionConverter.unmarshalField(RobustReflectionConverter.java:349)
            	at hudson.util.RobustReflectionConverter.doUnmarshal(RobustReflectionConverter.java:289)
            	at hudson.util.RobustReflectionConverter.unmarshal(RobustReflectionConverter.java:228)
            	at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:72)
            	at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:65)
            	at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:66)
            	at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:50)
            	at com.thoughtworks.xstream.core.TreeUnmarshaller.start(TreeUnmarshaller.java:134)
            	at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.unmarshal(AbstractTreeMarshallingStrategy.java:32)
            	at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1189)
            	at hudson.util.XStream2.unmarshal(XStream2.java:113)
            	at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1173)
            	at hudson.XmlFile.unmarshal(XmlFile.java:163)
            	... 9 more
            Caused by: java.lang.IndexOutOfBoundsException: only START_TAG can have attributes END_TAG seen ...ategy class="hudson.security.ProjectMatrixAuthorizationStrategy"/>... @8:86
            	at org.xmlpull.mxp1.MXParser.getAttributeValue(MXParser.java:927)
            	at com.thoughtworks.xstream.io.xml.XppReader.getAttribute(XppReader.java:139)
            	at com.thoughtworks.xstream.io.ReaderWrapper.getAttribute(ReaderWrapper.java:52)
            	at hudson.util.RobustReflectionConverter.instantiateNewInstance(RobustReflectionConverter.java:383)
            	at hudson.util.RobustReflectionConverter.unmarshal(RobustReflectionConverter.java:227)
            	at hudson.security.ProjectMatrixAuthorizationStrategy$ConverterImpl.unmarshal(ProjectMatrixAuthorizationStrategy.java:120)
            	at hudson.util.XStream2$AssociatedConverterImpl.unmarshal(XStream2.java:362)
            	at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:72)
            	... 24 more
            
            

            I managed to fix the problem by comparing both instance config.xml.

            Failing config.xml, instance 1
            <?xml version='1.0' encoding='UTF-8'?>
            <hudson>
              <disabledAdministrativeMonitors/>
              <version>1.0</version>
              <numExecutors>2</numExecutors>
              <mode>NORMAL</mode>
              <useSecurity>true</useSecurity>
              <authorizationStrategy class="hudson.security.ProjectMatrixAuthorizationStrategy"/>
              <securityRealm class="hudson.security.HudsonPrivateSecurityRealm">
                <disableSignup>true</disableSignup>
                <enableCaptcha>false</enableCaptcha>
              </securityRealm>
              <disableRememberMe>false</disableRememberMe>
              <projectNamingStrategy class="jenkins.model.ProjectNamingStrategy$DefaultProjectNamingStrategy"/>
              <workspaceDir>${ITEM_ROOTDIR}/workspace</workspaceDir>
              <buildsDir>${ITEM_ROOTDIR}/builds</buildsDir>
              <markupFormatter class="hudson.markup.EscapedMarkupFormatter"/>
              <jdks/>
              <viewsTabBar class="hudson.views.DefaultViewsTabBar"/>
              <myViewsTabBar class="hudson.views.DefaultMyViewsTabBar"/>
              <clouds/>
              <slaves/>
              <scmCheckoutRetryCount>0</scmCheckoutRetryCount>
              <views>
                <hudson.model.AllView>
                  <owner class="hudson" reference="../../.."/>
                  <name>All</name>
                  <filterExecutors>false</filterExecutors>
                  <filterQueue>false</filterQueue>
                  <properties class="hudson.model.View$PropertyList"/>
                </hudson.model.AllView>
              </views>
              <primaryView>All</primaryView>
              <slaveAgentPort>0</slaveAgentPort>
              <label></label>
              <nodeProperties/>
              <globalNodeProperties/>
            </hudson>
            
            Working config.xml, instance 2
            <?xml version='1.0' encoding='UTF-8'?>
            <hudson>
              <disabledAdministrativeMonitors>
                <string>jenkins.security.RekeySecretAdminMonitor</string>
              </disabledAdministrativeMonitors>
              <version>1.565.3</version>
              <numExecutors>2</numExecutors>
              <mode>NORMAL</mode>
              <useSecurity>true</useSecurity>
              <authorizationStrategy class="hudson.security.ProjectMatrixAuthorizationStrategy">
                <permission>hudson.model.Hudson.Administer:mickael</permission>
              </authorizationStrategy>
              <securityRealm class="hudson.security.HudsonPrivateSecurityRealm">
                <disableSignup>true</disableSignup>
                <enableCaptcha>false</enableCaptcha>
              </securityRealm>
              <disableRememberMe>false</disableRememberMe>
              <projectNamingStrategy class="jenkins.model.ProjectNamingStrategy$DefaultProjectNamingStrategy"/>
              <workspaceDir>${ITEM_ROOTDIR}/workspace</workspaceDir>
              <buildsDir>${ITEM_ROOTDIR}/builds</buildsDir>
              <markupFormatter class="hudson.markup.EscapedMarkupFormatter"/>
              <jdks/>
              <viewsTabBar class="hudson.views.DefaultViewsTabBar"/>
              <myViewsTabBar class="hudson.views.DefaultMyViewsTabBar"/>
              <clouds/>
              <slaves/>
              <quietPeriod>5</quietPeriod>
              <scmCheckoutRetryCount>0</scmCheckoutRetryCount>
              <views>
                <hudson.model.AllView>
                  <owner class="hudson" reference="../../.."/>
                  <name>All</name>
                  <filterExecutors>false</filterExecutors>
                  <filterQueue>false</filterQueue>
                  <properties class="hudson.model.View$PropertyList"/>
                </hudson.model.AllView>
              </views>
              <primaryView>All</primaryView>
              <slaveAgentPort>0</slaveAgentPort>
              <label></label>
              <nodeProperties/>
              <globalNodeProperties/>
            </hudson>
            

            The main difference is on <authorizationStrategy> tag.

            If I edited /var/lib/jenkins/config.xml and replaced

            <authorizationStrategy class="hudson.security.ProjectMatrixAuthorizationStrategy"/>
            

            by

              <authorizationStrategy class="hudson.security.ProjectMatrixAuthorizationStrategy">
                <permission>hudson.model.Hudson.Administer:mickael</permission>
              </authorizationStrategy>
            

            then, after restarting the instance, Jenkins is back to work.

            Cheers,

            Show
            mickael Mickael Ange added a comment - Hi, I have 2 Jenkins instances in testing (1.565.3) with a unique administrator account for username mickael . I configured "Project-based Matrix Authorization Strategy" on both and I don't know why (maybe my bad during the process), one instance failed to restart after installing thinBackup plugin from CLI. Oct 06, 2014 11:50:16 AM hudson.util.BootFailure publish SEVERE: Failed to initialize Jenkins hudson.util.HudsonFailedToLoad: org.jvnet.hudson.reactor.ReactorException: java.io.IOException: Unable to read / var /lib/jenkins/config.xml at hudson.WebAppMain$3.run(WebAppMain.java:234) Caused by: org.jvnet.hudson.reactor.ReactorException: java.io.IOException: Unable to read / var /lib/jenkins/config.xml at org.jvnet.hudson.reactor.Reactor.execute(Reactor.java:269) at jenkins.InitReactorRunner.run(InitReactorRunner.java:44) at jenkins.model.Jenkins.executeReactor(Jenkins.java:916) at jenkins.model.Jenkins.<init>(Jenkins.java:815) at hudson.model.Hudson.<init>(Hudson.java:82) at hudson.model.Hudson.<init>(Hudson.java:78) at hudson.WebAppMain$3.run(WebAppMain.java:222) Caused by: java.io.IOException: Unable to read / var /lib/jenkins/config.xml at hudson.XmlFile.unmarshal(XmlFile.java:165) at jenkins.model.Jenkins$17.run(Jenkins.java:2565) at org.jvnet.hudson.reactor.TaskGraphBuilder$TaskImpl.run(TaskGraphBuilder.java:169) at org.jvnet.hudson.reactor.Reactor.runTask(Reactor.java:282) at jenkins.model.Jenkins$7.runTask(Jenkins.java:905) at org.jvnet.hudson.reactor.Reactor$2.run(Reactor.java:210) at org.jvnet.hudson.reactor.Reactor$Node.run(Reactor.java:117) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang. Thread .run( Thread .java:745) Caused by: com.thoughtworks.xstream.converters.ConversionException: only START_TAG can have attributes END_TAG seen ...ategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" />... @8:86 : only START_TAG can have attributes END_TAG seen ...ategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" />... @8:86 ---- Debugging information ---- message : only START_TAG can have attributes END_TAG seen ...ategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" />... @8:86 cause-exception : java.lang.IndexOutOfBoundsException cause-message : only START_TAG can have attributes END_TAG seen ...ategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" />... @8:86 class : hudson.security.ProjectMatrixAuthorizationStrategy required-type : hudson.security.ProjectMatrixAuthorizationStrategy converter-type : hudson.util.XStream2$AssociatedConverterImpl path : /hudson/authorizationStrategy line number : 8 class[ 1] : hudson.model.Hudson converter-type[1] : hudson.util.RobustReflectionConverter version : not available ------------------------------- at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:79) at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:65) at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:66) at hudson.util.RobustReflectionConverter.unmarshalField(RobustReflectionConverter.java:349) at hudson.util.RobustReflectionConverter.doUnmarshal(RobustReflectionConverter.java:289) at hudson.util.RobustReflectionConverter.unmarshal(RobustReflectionConverter.java:228) at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:72) at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:65) at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:66) at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:50) at com.thoughtworks.xstream.core.TreeUnmarshaller.start(TreeUnmarshaller.java:134) at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.unmarshal(AbstractTreeMarshallingStrategy.java:32) at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1189) at hudson.util.XStream2.unmarshal(XStream2.java:113) at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1173) at hudson.XmlFile.unmarshal(XmlFile.java:163) ... 9 more Caused by: java.lang.IndexOutOfBoundsException: only START_TAG can have attributes END_TAG seen ...ategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" />... @8:86 at org.xmlpull.mxp1.MXParser.getAttributeValue(MXParser.java:927) at com.thoughtworks.xstream.io.xml.XppReader.getAttribute(XppReader.java:139) at com.thoughtworks.xstream.io.ReaderWrapper.getAttribute(ReaderWrapper.java:52) at hudson.util.RobustReflectionConverter.instantiateNewInstance(RobustReflectionConverter.java:383) at hudson.util.RobustReflectionConverter.unmarshal(RobustReflectionConverter.java:227) at hudson.security.ProjectMatrixAuthorizationStrategy$ConverterImpl.unmarshal(ProjectMatrixAuthorizationStrategy.java:120) at hudson.util.XStream2$AssociatedConverterImpl.unmarshal(XStream2.java:362) at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:72) ... 24 more I managed to fix the problem by comparing both instance config.xml. Failing config.xml, instance 1 <?xml version= '1.0' encoding= 'UTF-8' ?> <hudson> <disabledAdministrativeMonitors/> <version>1.0</version> <numExecutors>2</numExecutors> <mode>NORMAL</mode> <useSecurity> true </useSecurity> <authorizationStrategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" /> <securityRealm class= "hudson.security.HudsonPrivateSecurityRealm" > <disableSignup> true </disableSignup> <enableCaptcha> false </enableCaptcha> </securityRealm> <disableRememberMe> false </disableRememberMe> <projectNamingStrategy class= "jenkins.model.ProjectNamingStrategy$DefaultProjectNamingStrategy" /> <workspaceDir>${ITEM_ROOTDIR}/workspace</workspaceDir> <buildsDir>${ITEM_ROOTDIR}/builds</buildsDir> <markupFormatter class= "hudson.markup.EscapedMarkupFormatter" /> <jdks/> <viewsTabBar class= "hudson.views.DefaultViewsTabBar" /> <myViewsTabBar class= "hudson.views.DefaultMyViewsTabBar" /> <clouds/> <slaves/> <scmCheckoutRetryCount>0</scmCheckoutRetryCount> <views> <hudson.model.AllView> <owner class= "hudson" reference= "../../.." /> <name>All</name> <filterExecutors> false </filterExecutors> <filterQueue> false </filterQueue> <properties class= "hudson.model.View$PropertyList" /> </hudson.model.AllView> </views> <primaryView>All</primaryView> <slaveAgentPort>0</slaveAgentPort> <label></label> <nodeProperties/> <globalNodeProperties/> </hudson> Working config.xml, instance 2 <?xml version= '1.0' encoding= 'UTF-8' ?> <hudson> <disabledAdministrativeMonitors> <string>jenkins.security.RekeySecretAdminMonitor</string> </disabledAdministrativeMonitors> <version>1.565.3</version> <numExecutors>2</numExecutors> <mode>NORMAL</mode> <useSecurity> true </useSecurity> <authorizationStrategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" > <permission>hudson.model.Hudson.Administer:mickael</permission> </authorizationStrategy> <securityRealm class= "hudson.security.HudsonPrivateSecurityRealm" > <disableSignup> true </disableSignup> <enableCaptcha> false </enableCaptcha> </securityRealm> <disableRememberMe> false </disableRememberMe> <projectNamingStrategy class= "jenkins.model.ProjectNamingStrategy$DefaultProjectNamingStrategy" /> <workspaceDir>${ITEM_ROOTDIR}/workspace</workspaceDir> <buildsDir>${ITEM_ROOTDIR}/builds</buildsDir> <markupFormatter class= "hudson.markup.EscapedMarkupFormatter" /> <jdks/> <viewsTabBar class= "hudson.views.DefaultViewsTabBar" /> <myViewsTabBar class= "hudson.views.DefaultMyViewsTabBar" /> <clouds/> <slaves/> <quietPeriod>5</quietPeriod> <scmCheckoutRetryCount>0</scmCheckoutRetryCount> <views> <hudson.model.AllView> <owner class= "hudson" reference= "../../.." /> <name>All</name> <filterExecutors> false </filterExecutors> <filterQueue> false </filterQueue> <properties class= "hudson.model.View$PropertyList" /> </hudson.model.AllView> </views> <primaryView>All</primaryView> <slaveAgentPort>0</slaveAgentPort> <label></label> <nodeProperties/> <globalNodeProperties/> </hudson> The main difference is on <authorizationStrategy> tag. If I edited /var/lib/jenkins/config.xml and replaced <authorizationStrategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" /> by <authorizationStrategy class= "hudson.security.ProjectMatrixAuthorizationStrategy" > <permission>hudson.model.Hudson.Administer:mickael</permission> </authorizationStrategy> then, after restarting the instance, Jenkins is back to work. Cheers,
            oleg_nenashev Oleg Nenashev made changes -
            Field Original Value New Value
            Component/s matrix-auth [ 18131 ]
            Component/s security [ 15508 ]
            Component/s core [ 15593 ]
            Hide
            triangle Shubham Sharma added a comment -

            Thanks mickael.It worked for me.

            Show
            triangle Shubham Sharma added a comment - Thanks mickael.It worked for me.
            Hide
            raghavt Raghavendra Tallam added a comment -

            I faced the same issue. I tried to Update the Plugin along with Some other Plugins uninstalls.

            So, I Deleted the DISABLED files in Plugins Folder and Restarted my Jenkins Instance.

            Jenkins Loaded like a Charm..

            Show
            raghavt Raghavendra Tallam added a comment - I faced the same issue. I tried to Update the Plugin along with Some other Plugins uninstalls. So, I Deleted the DISABLED files in Plugins Folder and Restarted my Jenkins Instance. Jenkins Loaded like a Charm..
            rtyler R. Tyler Croy made changes -
            Workflow JNJira [ 139957 ] JNJira + In-Review [ 175187 ]
            rarabaolaza Raul Arabaolaza made changes -
            Link This issue is related to JENKINS-45501 [ JENKINS-45501 ]
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Raul Arabaolaza
            Path:
            src/test/java/com/cloudbees/hudson/plugins/folder/FolderTest.java
            http://jenkins-ci.org/commit/cloudbees-folder-plugin/c17a394bf4afeea0bf05bc033c305d93db6c5ead
            Log:
            JENKINS-45501 Fixes for JENKINS-9774 and JENKINS-41370

            • Now `hudson.security.ProjectMatrixAuthorizationStrategy` can be deserialized
            • Bypassing the GUI on `copyJob` and issuing the proper Http request directly
            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Raul Arabaolaza Path: src/test/java/com/cloudbees/hudson/plugins/folder/FolderTest.java http://jenkins-ci.org/commit/cloudbees-folder-plugin/c17a394bf4afeea0bf05bc033c305d93db6c5ead Log: JENKINS-45501 Fixes for JENKINS-9774 and JENKINS-41370 Now `hudson.security.ProjectMatrixAuthorizationStrategy` can be deserialized Bypassing the GUI on `copyJob` and issuing the proper Http request directly
            danielbeck Daniel Beck made changes -
            Epic Link JENKINS-46832 [ 185187 ]
            danielbeck Daniel Beck made changes -
            Link This issue is duplicated by JENKINS-29617 [ JENKINS-29617 ]
            danielbeck Daniel Beck made changes -
            Link This issue is duplicated by JENKINS-23304 [ JENKINS-23304 ]
            danielbeck Daniel Beck made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            danielbeck Daniel Beck made changes -
            Assignee Daniel Beck [ danielbeck ]
            Hide
            danielbeck Daniel Beck added a comment -

            https://github.com/jenkinsci/matrix-auth-plugin/pull/25 ensures empty project-based configurations can be loaded in case this is actually desired.

            https://github.com/jenkinsci/matrix-auth-plugin/pull/24 ensures no accidental 'empty' configuration can be submitted, which seems to be the major issue to me.

            Show
            danielbeck Daniel Beck added a comment - https://github.com/jenkinsci/matrix-auth-plugin/pull/25 ensures empty project-based configurations can be loaded in case this is actually desired. https://github.com/jenkinsci/matrix-auth-plugin/pull/24 ensures no accidental 'empty' configuration can be submitted, which seems to be the major issue to me.
            danielbeck Daniel Beck made changes -
            Remote Link This issue links to "PR 25 (Web Link)" [ 17683 ]
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Daniel Beck
            Path:
            src/main/java/hudson/security/ProjectMatrixAuthorizationStrategy.java
            src/test/java/hudson/security/ProjectMatrixAuthorizationStrategyTest.java
            src/test/resources/hudson/security/ProjectMatrixAuthorizationStrategyTest/loadEmptyAuthorizationStrategy/config.xml
            src/test/resources/hudson/security/ProjectMatrixAuthorizationStrategyTest/loadFilledAuthorizationStrategy/config.xml
            http://jenkins-ci.org/commit/matrix-auth-plugin/9463c2142a1f3c558a19a51017480d16ba205bf4
            Log:
            Merge pull request #25 from daniel-beck/unmarshal-robustness

            JENKINS-9774 Drop support for pre-2009 serialized format that resulted in errors

            Compare: https://github.com/jenkinsci/matrix-auth-plugin/compare/b53384b02589...9463c2142a1f

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Daniel Beck Path: src/main/java/hudson/security/ProjectMatrixAuthorizationStrategy.java src/test/java/hudson/security/ProjectMatrixAuthorizationStrategyTest.java src/test/resources/hudson/security/ProjectMatrixAuthorizationStrategyTest/loadEmptyAuthorizationStrategy/config.xml src/test/resources/hudson/security/ProjectMatrixAuthorizationStrategyTest/loadFilledAuthorizationStrategy/config.xml http://jenkins-ci.org/commit/matrix-auth-plugin/9463c2142a1f3c558a19a51017480d16ba205bf4 Log: Merge pull request #25 from daniel-beck/unmarshal-robustness JENKINS-9774 Drop support for pre-2009 serialized format that resulted in errors Compare: https://github.com/jenkinsci/matrix-auth-plugin/compare/b53384b02589...9463c2142a1f
            Hide
            danielbeck Daniel Beck added a comment -

            Resolved towards matrix-auth 1.8.

            Show
            danielbeck Daniel Beck added a comment - Resolved towards matrix-auth 1.8.
            danielbeck Daniel Beck made changes -
            Status In Progress [ 3 ] Resolved [ 5 ]
            Resolution Fixed [ 1 ]
            danielbeck Daniel Beck made changes -
            Remote Link This issue links to "Page (Jenkins Wiki)" [ 17684 ]
            danielbeck Daniel Beck made changes -
            Remote Link This issue links to "Page (Jenkins Wiki)" [ 17684 ]

              People

              • Assignee:
                danielbeck Daniel Beck
                Reporter:
                davidstrauss davidstrauss
              • Votes:
                2 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: