[JENKINS-28203] unable to login via jenkins cli with active directory

May 04, 2015 9:19:12 AM INFO hudson.TcpSlaveAgentListener$ConnectionHandler run

Accepted connection #31 from /10.200.36.192:64733

May 04, 2015 9:19:56 AM WARNING hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider resolveGroups

AD chain lookup is taking too long (50ms). Falling back to recursive lookup

May 04, 2015 9:19:56 AM WARNING hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider resolveGroups

AD chain lookup is taking too long (39ms). Falling back to recursive lookup

May 04, 2015 9:19:58 AM INFO hudson.cli.CLICommand main

CLI login attempt failed: 905759bf-883f-48ec-bfeb-f382e896c210

hudson.security.UserMayOrMayNotExistException: Unable to retrieve the user information without bind DN/password configured

at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:330)

at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:219)

at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:163)

at hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider.loadUserByUsername(AbstractActiveDirectoryAuthenticationProvider.java:53)

at hudson.plugins.active_directory.ActiveDirectorySecurityRealm.loadUserByUsername(ActiveDirectorySecurityRealm.java:657)

at hudson.cli.ClientAuthenticationCache.set(ClientAuthenticationCache.java:99)

at hudson.cli.LoginCommand.run(LoginCommand.java:37)

at hudson.cli.CLICommand.main(CLICommand.java:237)

at hudson.cli.CliManagerImpl.main(CliManagerImpl.java:92)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

at java.lang.reflect.Method.invoke(Unknown Source)

at hudson.remoting.RemoteInvocationHandler$RPCRequest.perform(RemoteInvocationHandler.java:326)

at hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:301)

at hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:260)

at hudson.remoting.UserRequest.perform(UserRequest.java:121)

at hudson.remoting.UserRequest.perform(UserRequest.java:49)

at hudson.remoting.Request$2.run(Request.java:325)

at hudson.remoting.InterceptingExecutorService$1.call(InterceptingExecutorService.java:68)

at hudson.cli.CliManagerImpl$1.call(CliManagerImpl.java:63)

at hudson.remoting.CallableDecoratorAdapter.call(CallableDecoratorAdapter.java:18)

at hudson.remoting.CallableDecoratorList$1.call(CallableDecoratorList.java:21)

at jenkins.util.ContextResettingExecutorService$2.call(ContextResettingExecutorService.java:46)

at java.util.concurrent.FutureTask$Sync.innerRun(Unknown Source)

at java.util.concurrent.FutureTask.run(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

at java.lang.Thread.run(Unknown Source)

---
Originally reported by funeeldy, imported from: unable to login via jenkins cli with active directory

• assignee: fbelzunc
  
• status: Open
  
• priority: Blocker
  
• component(s): active-directory-plugin
  
• resolution: Unresolved
  
• votes: 0
  
• watchers: 5
  
• imported: 2025-12-07
  

Raw content of original issue

May 04, 2015 9:19:12 AM INFO hudson.TcpSlaveAgentListener$ConnectionHandler run

Accepted connection #31 from /10.200.36.192:64733


May 04, 2015 9:19:56 AM WARNING hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider resolveGroups

AD chain lookup is taking too long (50ms). Falling back to recursive lookup


May 04, 2015 9:19:56 AM WARNING hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider resolveGroups

AD chain lookup is taking too long (39ms). Falling back to recursive lookup


May 04, 2015 9:19:58 AM INFO hudson.cli.CLICommand main

CLI login attempt failed: 905759bf-883f-48ec-bfeb-f382e896c210

hudson.security.UserMayOrMayNotExistException: Unable to retrieve the user information without bind DN/password configured

	at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:330)

	at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:219)

	at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:163)

	at hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider.loadUserByUsername(AbstractActiveDirectoryAuthenticationProvider.java:53)

	at hudson.plugins.active_directory.ActiveDirectorySecurityRealm.loadUserByUsername(ActiveDirectorySecurityRealm.java:657)

	at hudson.cli.ClientAuthenticationCache.set(ClientAuthenticationCache.java:99)

	at hudson.cli.LoginCommand.run(LoginCommand.java:37)

	at hudson.cli.CLICommand.main(CLICommand.java:237)

	at hudson.cli.CliManagerImpl.main(CliManagerImpl.java:92)

	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

	at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)

	at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

	at java.lang.reflect.Method.invoke(Unknown Source)

	at hudson.remoting.RemoteInvocationHandler$RPCRequest.perform(RemoteInvocationHandler.java:326)

	at hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:301)

	at hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:260)

	at hudson.remoting.UserRequest.perform(UserRequest.java:121)

	at hudson.remoting.UserRequest.perform(UserRequest.java:49)

	at hudson.remoting.Request$2.run(Request.java:325)

	at hudson.remoting.InterceptingExecutorService$1.call(InterceptingExecutorService.java:68)

	at hudson.cli.CliManagerImpl$1.call(CliManagerImpl.java:63)

	at hudson.remoting.CallableDecoratorAdapter.call(CallableDecoratorAdapter.java:18)

	at hudson.remoting.CallableDecoratorList$1.call(CallableDecoratorList.java:21)

	at jenkins.util.ContextResettingExecutorService$2.call(ContextResettingExecutorService.java:46)

	at java.util.concurrent.FutureTask$Sync.innerRun(Unknown Source)

	at java.util.concurrent.FutureTask.run(Unknown Source)

	at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)

	at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

	at java.lang.Thread.run(Unknown Source)

environment

```
windows server

jenkins cli

Name

Maven ID

License

Jenkins war org.jenkins-ci.main:jenkins-war:1.611 The MIT license

 

Spring Framework: Web MVC org.springframework:spring-webmvc:2.5.6.SEC03 The Apache Software License, Version 2.0

 

Commons BeanUtils commons-beanutils:commons-beanutils:1.8.3 The Apache Software License, Version 2.0

 

Bouncy Castle Provider org.bouncycastle:bcprov-jdk15on:1.47 Bouncy Castle Licence

 

oro oro:oro:2.0.8 The Apache Software License, Version 2.0

 

Task Reactor org.jenkins-ci:task-reactor:1.4 MIT License

 

dom4j org.jenkins-ci.dom4j:dom4j:1.6.1-jenkins-4 BSD License

 

Groovy org.codehaus.groovy:groovy-all:1.8.9 The Apache Software License, Version 2.0

 

ASM Analysis org.ow2.asm:asm-analysis:4.0 BSD

 

StAX API stax:stax-api:1.0.1 The Apache Software License, Version 2.0

 

SSH CLI client authenticator org.jenkins-ci.modules:ssh-cli-auth:1.2 MIT License

 

Google Guice - Core Library com.google.inject:guice:4.0-beta The Apache Software License, Version 2.0

 

commons-jelly-tags-xml commons-jelly:commons-jelly-tags-xml:1.1 The Apache Software License, Version 2.0

 

ASM Commons org.ow2.asm:asm-commons:4.0 BSD

 

Custom Acess Modifier annotations org.kohsuke:access-modifier-annotation:1.4 MIT License

 

jCIFS org.samba.jcifs:jcifs:1.3.17-kohsuke-1 GNU Lesser General Public License, version 2.1

 

Spring Framework: DAO org.springframework:spring-dao:1.2.9 The Apache Software License, Version 2.0

 

JLine jline:jline:0.9.94 BSD

 

Spring Framework: AOP org.springframework:spring-aop:2.5.6.SEC03 The Apache Software License, Version 2.0

 

HttpClient commons-httpclient:commons-httpclient:3.1 Apache License

 

Annotation Indexer org.jenkins-ci:annotation-indexer:1.7 MIT License

 

jnr-posix com.github.jnr:jnr-posix:3.0.1 Common Public License - v 1.0

GNU General Public License Version 2

GNU Lesser General Public License Version 2.1

 

Woodstox org.codehaus.woodstox:wstx-asl:3.2.9 The Apache Software License, Version 2.0

 

Spring Framework: Core org.springframework:spring-core:2.5.6.SEC03 The Apache Software License, Version 2.0

 

asm5 org.kohsuke:asm5:5.0.1 BSD License

 

jbcrypt org.mindrot:jbcrypt:0.3m ISC/BSD License

 

Commons Logging commons-logging:commons-logging:1.1.3 The Apache Software License, Version 2.0

 

winp org.jvnet.winp:winp:1.22 The MIT license

 

jnr-constants com.github.jnr:jnr-constants:0.8.5 The Apache Software License, Version 2.0

 

libzfs-java org.jvnet.libzfs:libzfs:0.5 COMMON DEVELOPMENT AND DISTRIBUTION LICENSE

 

jcommon jfree:jcommon:1.0.12 GNU Lesser General Public Licence

 

log4j log4j:log4j:1.2.9 The Apache Software License, Version 2.0

 

stax-api javax.xml.stream:stax-api:1.0-2 CDDL

 

JUnit junit:junit:4.11 Common Public License Version 1.0

 

PuTTY support for Trilead SSH2 library org.kohsuke:trilead-putty-extension:1.2 MIT license

 

Stapler adjunct for ZeroClipboard org.kohsuke.stapler:stapler-adjunct-zeroclipboard:1.3.5-1 MIT License

 

Apache Ant Core org.apache.ant:ant:1.8.4 The Apache Software License, Version 2.0

 

CodeMirror library from http://codemirror.net/ org.kohsuke.stapler:stapler-adjunct-codemirror:1.3 MIT License

 

JZlib com.jcraft:jzlib:1.1.3-kohsuke-1 BSD

 

Slave installer org.jenkins-ci.modules:slave-installer:1.5 MIT License

 

Embeddable daemonization library org.kohsuke:akuma:1.9 MIT license

 

Java binding for libpam.so org.kohsuke:libpam4j:1.8 The MIT license

 

commons-jelly-tags-fmt commons-jelly:commons-jelly-tags-fmt:1.0 The Apache Software License, Version 2.0

 

Instance Identity org.jenkins-ci.modules:instance-identity:1.4 MIT License

 

SezPoz Library net.java.sezpoz:sezpoz:1.9 CDDL

 

ASM Util org.ow2.asm:asm-util:4.0 BSD

 

jstl javax.servlet:jstl:1.1.0 CDDL

 

Stapler Jelly module org.kohsuke.stapler:stapler-jelly:1.237 2-clause BSD license

 

jnr-ffi com.github.jnr:jnr-ffi:1.0.7 The Apache Software License, Version 2.0

 

Apache Ant Launcher org.apache.ant:ant-launcher:1.8.4 The Apache Software License, Version 2.0

 

Ganymed SSH2 for Java org.jenkins-ci:trilead-ssh2:build217-jenkins-8 BSD style license

 

Commons IO commons-io:commons-io:2.4 The Apache Software License, Version 2.0

 

jffi com.github.jnr:jffi:1.2.7 The Apache Software License, Version 2.0

 

Jenkins remoting layer org.jenkins-ci.main:remoting:2.51 The MIT license

Apache License 2.0

 

SSH server org.jenkins-ci.modules:sshd:1.6 MIT License

 

Upstart slave installer org.jenkins-ci.modules:upstart-slave-installer:1.1 MIT License

 

JTidy org.jvnet.hudson:jtidy:4aug2000r7-dev-hudson-1 Java HTML Tidy License

 

Spring Framework: Web org.springframework:spring-web:2.5.6.SEC03 The Apache Software License, Version 2.0

 

Stapler Groovy module org.kohsuke.stapler:stapler-groovy:1.237 2-clause BSD license

 

Jenkins core org.jenkins-ci.main:jenkins-core:1.611 The MIT license

 

Timeline component at http://www.simile-widgets.org/timeline/ org.kohsuke.stapler:stapler-adjunct-timeline:1.4 BSD License

 

Jenkins cli org.jenkins-ci.main:cli:1.611 The MIT license

 

Apache MINA Core org.apache.mina:mina-core:2.0.5 Apache 2.0 License

 

javax.annotation API javax.annotation:javax.annotation-api:1.2 CDDL + GPLv2 with classpath exception

 

Utility around Java Crypto API org.jenkins-ci:crypto-util:1.1 MIT License

 

Winstone org.jenkins-ci:winstone:2.8 GNU Lesser General Public License version 2.1

COMMON DEVELOPMENT AND DISTRIBUTION LICENSE (CDDL) Version 1.0

 

Discovery commons-discovery:commons-discovery:0.4 The Apache Software License, Version 2.0

 

Commons Digester commons-digester:commons-digester:2.1 The Apache Software License, Version 2.0

 

jansi org.fusesource.jansi:jansi:1.9 The Apache Software License, Version 2.0

 

OS X slave installer org.jenkins-ci.modules:launchd-slave-installer:1.2 MIT License

 

Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs org.bouncycastle:bcpkix-jdk15on:1.47 Bouncy Castle Licence

 

Bridge method injection annotations com.infradna.tool:bridge-method-annotation:1.13 MIT License

 

commons-jelly org.jenkins-ci:commons-jelly:1.1-jenkins-20120928 The Apache Software License, Version 2.0

 

Commons Lang commons-lang:commons-lang:2.6 The Apache Software License, Version 2.0

 

Systemd slave installer org.jenkins-ci.modules:systemd-slave-installer:1.1 MIT License

 

Spring Framework: Beans org.springframework:spring-beans:2.5.6.SEC03 The Apache Software License, Version 2.0

 

Pure Java - COM bridge org.kohsuke.jinterop:j-interop:2.0.6-kohsuke-1 LGPL v3

 

embedded_su for Java com.sun.solaris:embedded_su4j:1.1 MIT license

 

json-lib org.kohsuke.stapler:json-lib:2.4-jenkins-2 The Apache Software License, Version 2.0

 

jaxen jaxen:jaxen:1.1-beta-11 BSD License

 

SLF4J API Module org.slf4j:slf4j-api:1.7.7 MIT License

 

JmDNS org.jenkins-ci:jmdns:3.4.0-jenkins-3 Apache License, Version 2.0

 

XStream Core org.jvnet.hudson:xstream:1.4.7-jenkins-1 BSD style

 

Memory Monitor org.jenkins-ci:memory-monitor:1.9 MIT

 

Stapler JRebel module org.kohsuke.stapler:stapler-jrebel:1.237 2-clause BSD license

 

Type arithmetic library for Java5 org.jvnet:tiger-types:1.3 CDDL

 

Constant Pool Scanner org.jenkins-ci:constant-pool-scanner:1.2 NetBeans CDDL/GPL

 

JNA-POSIX org.jruby.ext.posix:jna-posix:1.0.3-jenkins-1 GNU Lesser General Public License Version 2.1

 

jnr-x86asm com.github.jnr:jnr-x86asm:1.0.2 MIT License

 

Commons JEXL org.jenkins-ci:commons-jexl:1.1-jenkins-20111212 The Apache Software License, Version 2.0

 

Bytecode transformation-based library for managing backward compatibility org.jenkins-ci:bytecode-compatibility-transformer:1.5 The MIT license

 

Spring Framework: JDBC org.springframework:spring-jdbc:1.2.9 The Apache Software License, Version 2.0

 

Windows slave installer org.jenkins-ci.modules:windows-slave-installer:1.4 MIT License

 

Robust HTTP client library org.jvnet.robust-http-client:robust-http-client:1.2 MIT license

 

AOP alliance aopalliance:aopalliance:1.0 Public Domain

 

Commons Codec commons-codec:commons-codec:1.8 The Apache Software License, Version 2.0

 

Localizer org.jvnet.localizer:localizer:1.23 The MIT license

 

jfreechart jfree:jfreechart:1.0.9 GNU Lesser General Public Licence

 

commons-jelly-tags-define org.jvnet.hudson:commons-jelly-tags-define:1.0.1-hudson-20071021 The Apache Software License, Version 2.0

 

FindBugs-jsr305 com.google.code.findbugs:jsr305:1.3.9 The Apache Software License, Version 2.0

 

jffi com.github.jnr:jffi:1.2.7 The Apache Software License, Version 2.0

 

AntLR antlr:antlr:2.7.6 BSD License

 

Spring Framework: Context Support org.springframework:spring-context-support:2.5.6.SEC03 The Apache Software License, Version 2.0

 

JavaMail API (compat) javax.mail:mail:1.4.4 CDDL

GPLv2+CE

 

ezmorph net.sf.ezmorph:ezmorph:1.0.6 The Apache Software License, Version 2.0

 

Icon-Set module org.jenkins-ci.plugins.icon-shim:icon-set:1.0.5 MIT License

 

args4j args4j:args4j:2.0.31 MIT License

 

Hamcrest Core org.hamcrest:hamcrest-core:1.3 New BSD License

 

windows-package-checker org.kohsuke:windows-package-checker:1.0 MIT license

 

Java Native Access net.java.dev.jna:jna:4.1.0 LGPL, version 2.1

ASL, version 2

 

Commons Collections commons-collections:commons-collections:3.2.1 The Apache Software License, Version 2.0

 

Stapler org.kohsuke.stapler:stapler:1.237 2-clause BSD license

 

ASM Tree org.ow2.asm:asm-tree:4.0 BSD

 

Guava: Google Core Libraries for Java com.google.guava:guava:11.0.1 The Apache Software License, Version 2.0

 

Pure Java - COM bridge org.kohsuke.jinterop:j-interopdeps:2.0.6-kohsuke-1 LGPL v3

 

Acegi Security Core org.acegisecurity:acegi-security:1.0.7 The Apache Software License, Version 2.0

 

Spring Framework: Context org.springframework:spring-context:2.5.6.SEC03 The Apache Software License, Version 2.0

 

javax.inject javax.inject:javax.inject:1 The Apache Software License, Version 2.0

 

Version number manipulation org.jenkins-ci:version-number:1.1 MIT License

 

Apache Commons FileUpload commons-fileupload:commons-fileupload:1.3.1-jenkins-1 The Apache Software License, Version 2.0

 

relaxngDatatype relaxngDatatype:relaxngDatatype:20020414 BSD License

 

SLF4J JDK14 Binding org.slf4j:slf4j-jdk14:1.7.7 MIT License

 

MXP1: Xml Pull Parser 3rd Edition (XPP3) xpp3:xpp3:1.1.4c Indiana University Extreme! Lab Software License, vesion 1.1.1

Public Domain

Apache Software License, version 1.1

 

TXW2 Runtime com.sun.xml.txw2:txw2:20110809 CDDL v1.1 / GPL v2 dual license

 

activation org.jvnet.hudson:activation:1.1.1-hudson-1 CDDL

 

Apache Mina SSHD :: Core org.apache.sshd:sshd-core:0.8.0 Apache 2.0 License

 

ASM Core org.ow2.asm:asm:4.0 BSD

 

License and dependency information for plugins:

•Active Directory plugin

•All changes plugin

•Static Analysis Utilities

•Ant Plugin

•OWASP Markup Formatter Plugin

•build-environment

•Build Pipeline Plugin

•CCM Plug-in

•ClearCase Plug-in

•Configure Job Column Plugin

•Credentials Plugin

•CVS Plug-in

•Dashboard View

•Downstream build view

•Email Extension Plugin

•emotional-jenkins-plugin

•Environment File Plugin

•External Monitor Job Type Plugin

•Extra Columns Plugin

•Favorite View Plugin

•Favorite

•Green Balls

•HP Application Automation Tools

•Javadoc Plugin

•Job Configuration History Plugin

•jQuery plugin

•JUnit Plugin

•LDAP Plugin

•Mailer Plugin

•Matrix Authorization Strategy Plugin

•Matrix Project Plugin

•Maven Integration plugin

•MSBuild Plugin

•JENKINS MSTest plugin

•MSTestRunner plugin

•Multi slave config plugin

•next-executions

•PAM Authentication plugin

•Parameterized Trigger plugin

•Hudson PowerShell plugin

•Quality Center Plugin

•Schedule Build Plugin

•Script Security Plugin

•Shelve Project Plugin

•Show Build Parameters plugin

•Simple Dynamic ClearCase

•Slave SetupPlugin

•slave-status

•Slave Utilization Plugin

•SSH Credentials Plugin

•SSH Slaves plugin

•Subversion Plug-in

•Team Views

•Team Foundation Server Plug-in

•ThinBackup

•Token Macro Plugin

•Translation Assistance plugin

•View Job Filters

•Visual Studio Code Metrics Plugin

•Windows Slaves Plugin

```

Start with ActiveDirectoryUnixAuthenticationProvider.retrieveUser at line 330 and trace the call from ActiveDirectorySecurityRealm.loadUserByUsername through hudson.cli.LoginCommand. Reproduce the Jenkins CLI login failure with Active Directory and determine the expected behavior when bind DN/password is not configured; done means the reported CLI authentication path works or the limitation is clearly documented and tested.

Written by the indexing model from the issue text.