jenkinsci / jenkinsci/active-directory-plugin
[JENKINS-61710] Active Directory plugin - Group name change/mapping
- Dominant language
- Java
- Stars
- 53
- Forks
- 115
- PR merge metrics
- No merged PRs in 30d
Description
I have problem with Active directory plugin, when I change name of group after I add it to project-based security, mapping is disappear.
I think it caused by the way like this plugin or Jenkins remember typed group.
In my configuration CN/Name of groups are changing some time. Each time group name change whole group lose permissions to job.
I found two way to fix this:
- After first successful find group in AD, store it by its GUID
- Give Jenkins admin option chose, based on what attribute he/she want to store/search for groups in AD
---
Originally reported by
pawel_kaczanowski_syncron, imported from: Active Directory plugin - Group name change/mapping
fbelzunc
Raw content of original issue
I have problem with Active directory plugin, when I change name of group after I add it to project-based security, mapping is disappear.
I think it caused by the way like this plugin or Jenkins remember typed group.
In my configuration CN/Name of groups are changing some time. Each time group name change whole group lose permissions to job.
I found two way to fix this:
- After first successful find group in AD, store it by its GUID
- Give Jenkins admin option chose, based on what attribute he/she want to store/search for groups in AD
environment
```
Jenkins 2.222.1
OpenJDK 11.0.6+10-post-Ubuntu-1ubuntu118.04.1
Ubuntu 18.04 LTS
active-directory 2.16
```
Contributor guide
Research direction
Start with the active-directory plugin's project-based security group mapping and reproduce the loss of permissions after an Active Directory group CN/name change. The issue proposes storing groups by GUID or making the lookup attribute configurable, so confirm the intended behavior before implementation. Done means renamed groups retain their job permissions and the behavior is verified.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- authorization, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100