[JENKINS-14057] With Active Directory Plugin, the user/group validation in authorization strategy of configuration screen fails

Using the Project-based Matrix Authorization Strategy the identification of the usernames doesn't work properly. Sometimes the username is recognized, sometimes the user fullname is recognized, sometimes nor the username neither the full name are recognized.

It worked in old versions of jenkins and the plugin (1.16).

The errormessage is:

org.acegisecurity.BadCredentialsException: Failed to retrieve user information for xyz; nested exception is javax.naming.NamingException: [LDAP: error code 1 - 00000000: LdapErr: DSID-0C090627, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, vece

---
Originally reported by lot, imported from: With Active Directory Plugin, the user/group validation in authorization strategy of configuration screen fails

• assignee: kktest11
  
• status: Open
  
• priority: Major
  
• component(s): active-directory-plugin
  
• resolution: Unresolved
  
• votes: 13
  
• watchers: 18
  
• imported: 2025-12-07
  

Raw content of original issue

Using the Project-based Matrix Authorization Strategy the identification of the usernames doesn't work properly. Sometimes the username is recognized, sometimes the user fullname is recognized, sometimes nor the username neither the full name are recognized.


It worked in old versions of jenkins and the plugin (1.16).


The errormessage is:

org.acegisecurity.BadCredentialsException: Failed to retrieve user information for xyz; nested exception is javax.naming.NamingException: [LDAP: error code 1 - 00000000: LdapErr: DSID-0C090627, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, vece

• environment: Win Server 2008, AIX, AD plugin version=1.26, Jenkins version=1.424.6

1 attachment

- [Stacktrace1.txt](https://issues.jenkins.io/secure/attachment/23466/Stacktrace1.txt)

Start by reproducing the failure from the Project-based Matrix Authorization Strategy configuration screen using the reported Active Directory and Jenkins versions, then inspect the plugin's user/group validation flow and the attached Stacktrace1.txt. Done means usernames and full names are resolved consistently without the LDAP bind error.

Written by the indexing model from the issue text.