.NET Security Cruise Control

Question

I am trying to implement LDAP authentication along with the required permissions.

<internalSecurity> <cache type="inMemoryCache" duration="60" mode="sliding" /> <audit> <xmlFileAudit location="D:\Logs\CCNet_Audit.xml"/> </audit> <auditReader type="xmlFileAuditReader" location="D:\Logs\CCNet_Audit.xml"/> <users> <ldapUser name="*username*" domain="*localdomain*"/> </users> <permissions> <rolePermission name="Admin" forceBuild="Allow" sendMessage="Allow" startProject="Allow" changeProject="Allow" viewSecurity="Allow" modifySecurity="Allow" viewProject="Allow" viewConfiguration="Allow" > <users> <userName name="*username*"/> </users> </rolePermission> </permissions> 

Inside my project, I have the following XML:

 <project name="TestProject" description="TestProject" queue="Q7"> <security type="defaultProjectSecurity" defaultRight="Deny"> <permissions> <rolePermission name="Admin" ref="Admin"/> </permissions> </security> 

My journal in (D: \ Logs \ CCNet_Audit.xml) says I "denied"

 <event><dateTime>2015-08-17T09:30:41.7973762-04:00</dateTime><user>*username*</user><type>Login</type><outcome>Deny</outcome></event> 

and the project is not available in the CC tray.

My username is correct, and I have the domain correctly in the configuration (I just don't want to share it).

One thing I noticed is that the username seems to have a problem with the question that Cruise Control gets c-Joe.smith compared to the English “normalization” of c-Joe.Smith., And yes, I tried this in both directions.

Any help?

Answer 1

Try setting defaultRight = "Allow" for your admin group.

 <rolePermission name="Admin" defaultRight="Allow" forceBuild="Allow" sendMessage="Allow" startProject="Allow" changeProject="Allow" viewSecurity="Allow" modifySecurity="Allow" viewProject="Allow" viewConfiguration="Allow" > <users> <userName name="*username*"/> </users> </rolePermission>