[JENKINS-5854] AD Login Remember Me functionailty inactive

I have found that when checking the remember me checkbox when logging in using AD security, the cookie gets created properly with good contents.

But if you close your browser and then re-open it, Hudson overwrites the existing cookie immediately which clears out any remembered authorization values, therefore forcing a re-login to be necessary.

Cookie before closing browser after logging in using AD Security with Rememeber Me checkbox selected:

iconSize

16x16

SERVERNAME/

1024

240850816

30086254

4282440880

30062970

*

hudson_auto_refresh

false

SERVERNAME/

1024

3612804608

30069802

3778355968

30063767

*

ACEGI_SECURITY_HASHED_REMEMBER_ME_COOKIE

"HASH REMOVED FOR SECURITY PURPOSES"

SERVERNAME/

1024

3597763072

30066743

2232728608

30063927

*

Cookie after closing browser and re-opening to Hudson Dashboard:

iconSize

16x16

SERVERNAME/

1024

240850816

30086254

4282440880

30062970

*

hudson_auto_refresh

false

SERVERNAME/

1024

3612804608

30069802

3778355968

30063767

*

Thanks.

---
Originally reported by jburrows, imported from: AD Login Remember Me functionailty inactive

• status: Open
  
• priority: Minor
  
• component(s): active-directory-plugin
  
• resolution: Unresolved
  
• votes: 14
  
• watchers: 11
  
• imported: 2025-12-07
  

Raw content of original issue

I have found that when checking the remember me checkbox when logging in using AD security, the cookie gets created properly with good contents. 


But if you close your browser and then re-open it, Hudson overwrites the existing cookie immediately which clears out any remembered authorization values, therefore forcing a re-login to be necessary.


Cookie before closing browser after logging in using AD Security with Rememeber Me checkbox selected:


iconSize

16x16

SERVERNAME/

1024

240850816

30086254

4282440880

30062970

*

hudson_auto_refresh

false

SERVERNAME/

1024

3612804608

30069802

3778355968

30063767

*

ACEGI_SECURITY_HASHED_REMEMBER_ME_COOKIE

"HASH REMOVED FOR SECURITY PURPOSES"

SERVERNAME/

1024

3597763072

30066743

2232728608

30063927

*


Cookie after closing browser and re-opening to Hudson Dashboard:


iconSize

16x16

SERVERNAME/

1024

240850816

30086254

4282440880

30062970

*

hudson_auto_refresh

false

SERVERNAME/

1024

3612804608

30069802

3778355968

30063767

*


Thanks.

environment

```
Hudson version 1.348 installed on Windows Server 2003 Standard Edition SP2 machine under Tomcat version 6.0.24. Browser opened on Windows XP Pro Version 2002 SP3 machine using IE 7.0.5730.13.

Also, Jenkins v.1.403 on its own server (Winstone)

Also, Hudson v.1.376 on Tomcat 6, CentOS 5.3 x86 using Firefox 3.6.9

Also, Hudson v.1.319 standalone, Ubuntu Server 10.04 (64 bit), using Chrome 8.0.552 on Ubuntu 10.10
```

Start by reproducing the active-directory-plugin login flow with Remember Me enabled, then trace where the existing authentication cookie is handled when the dashboard opens after a browser restart. Done means the remembered authorization cookie is preserved and the user is not forced to log in again; the issue names no files or tests, so locating suitable coverage is part of the investigation.

Written by the indexing model from the issue text.