Geek Answers Handbook

Are Jenkins user permissions erased on reboot?

I hope someone can point out some kind of schoolboy mistake I am making here, as I am going to lose my mind.

  • Fresh installation of jenkins jenkins-1.590-1.1.noarch.rpm on the red hat from here
  • I can configure work orders perfectly, and they work as expected, interacting with svn
  • I set up user access as described here in jenkins wiki
  • I can go in and go out as I please, and all the tasks are still working fine.
  • HOWEVER after rebooting the server, I can still log in, but all my access rights have disappeared (this happens with all users)

Any idea why permissions disappear?

To get around this, I have to clear all users and configure them again, but they are erased again on reboot.

Thanks in advance

EDIT

I use Jenkins own custom db and have tried both matrix-based permissions and project-based permissions.

After a reboot, when I try to access the jenkins configuration page, I get an error: "t143ahe not enough permission" General / Administration "

My config.xml after reboot (it looks like I'm administering according to this):

<?xml version='1.0' encoding='UTF-8'?>
<hudson>
  <disabledAdministrativeMonitors/>
  <version>1.0</version>
   <numExecutors>2</numExecutors>
  <mode>NORMAL</mode>
  <useSecurity>true</useSecurity>
  <authorizationStrategy class="hudson.security.ProjectMatrixAuthorizationStrategy">
    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Create:T143AHE</permission>
    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Delete:T143AHE</permission>
    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.ManageDomains:T143AHE</permission>
    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Update:T143AHE</permission>
    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.View:T143AHE</permission>
    <permission>hudson.model.Computer.Build:T143AHE</permission>
    <permission>hudson.model.Computer.Configure:T143AHE</permission>
    <permission>hudson.model.Computer.Connect:T143AHE</permission>
    <permission>hudson.model.Computer.Create:T143AHE</permission>
    <permission>hudson.model.Computer.Delete:T143AHE</permission>
    <permission>hudson.model.Computer.Disconnect:T143AHE</permission>
    <permission>hudson.model.Hudson.Administer:T143AHE</permission>
    <permission>hudson.model.Hudson.ConfigureUpdateCenter:T143AHE</permission>
    <permission>hudson.model.Hudson.Read:T143AHE</permission>
    <permission>hudson.model.Hudson.Read:anonymous</permission>
    <permission>hudson.model.Hudson.RunScripts:T143AHE</permission>
    <permission>hudson.model.Hudson.UploadPlugins:T143AHE</permission>
    <permission>hudson.model.Item.Build:T143AHE</permission>
    <permission>hudson.model.Item.Cancel:T143AHE</permission>
    <permission>hudson.model.Item.Configure:T143AHE</permission>
    <permission>hudson.model.Item.Create:T143AHE</permission>
    <permission>hudson.model.Item.Delete:T143AHE</permission>
    <permission>hudson.model.Item.Discover:T143AHE</permission>
    <permission>hudson.model.Item.Read:T143AHE</permission>
    <permission>hudson.model.Item.Workspace:T143AHE</permission>
    <permission>hudson.model.Run.Delete:T143AHE</permission>
    <permission>hudson.model.Run.Update:T143AHE</permission>
    <permission>hudson.model.View.Configure:T143AHE</permission>
    <permission>hudson.model.View.Create:T143AHE</permission>
    <permission>hudson.model.View.Delete:T143AHE</permission>
    <permission>hudson.model.View.Read:T143AHE</permission>
    <permission>hudson.scm.SCM.Tag:T143AHE</permission>
  </authorizationStrategy>
  <securityRealm class="hudson.security.HudsonPrivateSecurityRealm">
    <disableSignup>false</disableSignup>
    <enableCaptcha>false</enableCaptcha>
  </securityRealm>
  <disableRememberMe>false</disableRememberMe>
  <projectNamingStrategy class="jenkins.model.ProjectNamingStrategy$DefaultProjectNamingStrategy"/>
  <workspaceDir>${ITEM_ROOTDIR}/workspace</workspaceDir>
  <buildsDir>${ITEM_ROOTDIR}/builds</buildsDir>
  <markupFormatter class="hudson.markup.EscapedMarkupFormatter"/>
  <jdks/>
  <viewsTabBar class="hudson.views.DefaultViewsTabBar"/>
  <myViewsTabBar class="hudson.views.DefaultMyViewsTabBar"/>
  <clouds/>
  <slaves/>
  <scmCheckoutRetryCount>0</scmCheckoutRetryCount>
  <views>
    <hudson.model.AllView>
      <owner class="hudson" reference="../../.."/>
      <name>All</name>
      <filterExecutors>false</filterExecutors>
      <filterQueue>false</filterQueue>
     <properties class="hudson.model.View$PropertyList"/>
    </hudson.model.AllView>
  </views>
  <primaryView>All</primaryView>
  <slaveAgentPort>0</slaveAgentPort>
  <label></label>
  <nodeProperties/>
  <globalNodeProperties/>
</hudson>

My custom config.xml:

<user>
  <fullName>scribe1010</fullName>
  <properties>
    <hudson.model.PaneStatusProperties>
      <collapsed/>
    </hudson.model.PaneStatusProperties>
    <jenkins.security.ApiTokenProperty>
      <apiToken>lnqauTbOZ0xuAK9qBuh6/UG3RRmzN4mxkiSADlYmQD7jkqN1XswzKmqEOLpvBVsG</apiToken>
    </jenkins.security.ApiTokenProperty>
    <com.cloudbees.plugins.credentials.UserCredentialsProvider_-UserCredentialsProperty plugin="credentials@1.18">
      <domainCredentialsMap class="hudson.util.CopyOnWriteMap$Hash"/>
    </com.cloudbees.plugins.credentials.UserCredentialsProvider_-UserCredentialsProperty>
    <hudson.model.MyViewsProperty>
      <views>
        <hudson.model.AllView>
          <owner class="hudson.model.MyViewsProperty" reference="../../.."/>
          <name>All</name>
          <filterExecutors>false</filterExecutors>
          <filterQueue>false</filterQueue>
          <properties class="hudson.model.View$PropertyList"/>
        </hudson.model.AllView>
      </views>
    </hudson.model.MyViewsProperty>
    <hudson.search.UserSearchProperty>
      <insensitiveSearch>false</insensitiveSearch>
    </hudson.search.UserSearchProperty>
    <hudson.security.HudsonPrivateSecurityRealm_-Details>
      <passwordHash>#jbcrypt:$2a$10$29UCLwZafb8TTSsGvsWYBunY034m1q.Wjgl5JfbCJR83Dcvvs1Dh2</passwordHash>
    </hudson.security.HudsonPrivateSecurityRealm_-Details>
    <hudson.tasks.Mailer_-UserProperty plugin="mailer@1.12">
      <emailAddress>a.b@c.com</emailAddress>
    </hudson.tasks.Mailer_-UserProperty>
    <jenkins.security.LastGrantedAuthoritiesProperty>
      <roles>
        <string>authenticated</string>
      </roles>
      <timestamp>1416992003750</timestamp>
    </jenkins.security.LastGrantedAuthoritiesProperty>
  </properties>
</user>

NOTE. Here, the role is listed as “authenticated” and not as “administrator”, etc. (I don’t know if this is a problem or not).

EDIT 2 I updated the latest version but did not fix it.

+4
1

, (, , ) , .

+6

More articles:


All Articles