[JENKINS-75161] [active-directory-plugin] Configurable Domain Bind Password length limits

With a Jenkins deployed using the helm chart at a customer, we got a feedback that the Active Directory integration fails.

As their requirements, there is a security policy that service accounts (such as the AD binding one) to have passwords between 32 and 64 characters.

As per the testing of the integration team, the 'bind Password' field accepts up to 19 characters.

Can the bind Password length constraints (min. and max.) be made configurable?

 

Looking at https://github.com/jenkinsci/configuration-as-code-plugin/blob/master/demos/active-directory/README.md, https://github.com/jenkinsci/active-directory-plugin/blob/master/src/main/java/hudson/plugins/active_directory/ActiveDirectorySecurityRealm.java , https://github.com/jenkinsci/active-directory-plugin/blob/master/src/main/java/hudson/plugins/active_directory/ActiveDirectoryDomain.java , I have not seen anything on this matter.

---
Originally reported by ceddaerrix, imported from: [active-directory-plugin] Configurable Domain Bind Password length limits

• assignee: fbelzunc
  
• status: Open
  
• priority: Major
  
• component(s): active-directory-plugin
  
• label(s): jenkins, plugin
  
• resolution: Unresolved
  
• votes: 0
  
• watchers: 2
  
• imported: 2025-12-07
  

Raw content of original issue

With a Jenkins deployed using the helm chart at a customer, we got a feedback that the Active Directory integration fails.


As their requirements, there is a security policy that service accounts (such as the AD binding one) to have passwords between 32 and 64 characters.


As per the testing of the integration team, the 'bind Password' field accepts up to 19 characters.


Can the bind Password length constraints (min. and max.) be made configurable?


 


 Looking at https://github.com/jenkinsci/configuration-as-code-plugin/blob/master/demos/active-directory/README.md, https://github.com/jenkinsci/active-directory-plugin/blob/master/src/main/java/hudson/plugins/active_directory/ActiveDirectorySecurityRealm.java , https://github.com/jenkinsci/active-directory-plugin/blob/master/src/main/java/hudson/plugins/active_directory/ActiveDirectoryDomain.java , I have not seen anything on this matter.

Start with src/main/java/hudson/plugins/active_directory/ActiveDirectorySecurityRealm.java and ActiveDirectoryDomain.java, then review the active-directory example in the configuration-as-code README. Trace where the bind Password length is constrained and determine how configurable minimum and maximum values should be represented. Done means configured limits support the stated password range and enforce values outside those limits.

Written by the indexing model from the issue text.