jenkinsci / jenkinsci/active-directory-plugin

[JENKINS-61710] Active Directory plugin - Group name change/mapping

Open
#593 0 comments 0 reactions 0 assignees View on GitHub
component:active-directory-plugin imported-jira-issue priority:minor resolution:unresolved
Dominant language
Java
Stars
53
Forks
115
PR merge metrics
No merged PRs in 30d

Description

I have problem with Active directory plugin, when I change name of group after I add it to project-based security, mapping is disappear.

I think it caused by the way like this plugin or Jenkins remember typed group.

In my configuration CN/Name of groups are changing some time. Each time group name change whole group lose permissions to job.

I found two way to fix this:



  1. After first successful find group in AD, store it by its GUID

  2. Give Jenkins admin option chose, based on what attribute he/she want to store/search for groups in AD

---
Originally reported by pawel_kaczanowski_syncron, imported from: Active Directory plugin - Group name change/mapping


  • assignee: fbelzunc
  • status: Open
  • priority: Minor
  • component(s): active-directory-plugin
  • resolution: Unresolved
  • votes: 0
  • watchers: 1
  • imported: 2025-12-07

Raw content of original issue

I have problem with Active directory plugin, when I change name of group after I add it to project-based security, mapping is disappear.

I think it caused by the way like this plugin or Jenkins remember typed group.

In my configuration CN/Name of groups are changing some time. Each time group name change whole group lose permissions to job.

I found two way to fix this:



  1. After first successful find group in AD, store it by its GUID

  2. Give Jenkins admin option chose, based on what attribute he/she want to store/search for groups in AD


environment

```
Jenkins 2.222.1

OpenJDK 11.0.6+10-post-Ubuntu-1ubuntu118.04.1

Ubuntu 18.04 LTS

active-directory 2.16

```

Contributor guide

Open the contributing guide

Research direction

Start with the active-directory plugin's project-based security group mapping and reproduce the loss of permissions after an Active Directory group CN/name change. The issue proposes storing groups by GUID or making the lookup attribute configurable, so confirm the intended behavior before implementation. Done means renamed groups retain their job permissions and the behavior is verified.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authorization, security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.