[JENKINS-62171] Can't handle class jenkins.security.plugins.ldap.FromGroupSearchLDAPGroupMembershipStrategy#authoritiesPopulator

During startup when JCasC loads configuration (se below) the following is logged:

May 05, 2020 3:17:51 PM WARNING io.jenkins.plugins.casc.BaseConfigurator createAttribute

Can't handle class jenkins.security.plugins.ldap.FromGroupSearchLDAPGroupMembershipStrategy#authoritiesPopulator: type is abstract but not Describable.

Here's the JCasC yaml (sensitive data replaced with dummy):

jenkins:

  securityRealm:

    ldap:

      configurations:

      - server: "ldap.acme.org"

rootDN: "dc=utv,dc=acme,dc=org"

userSearchBase: "ou=people"

userSearch: "uid={0}"

groupSearchBase: "ou=group"

groupSearchFilter: "(& (cn={0}) (objectclass=posixGroup))"

groupMembershipStrategy:

  fromGroupSearch:

    filter: ""

displayNameAttributeName: "cn"

mailAddressAttributeName: "mail"

inhibitInferRootDN: false

      userIdStrategy: "caseInsensitive"

      groupIdStrategy: "caseInsensitive"

      disableMailAddressResolver: false

      disableRolePrefixing: true

      cache:

size: 20

ttl: 300

However, JCasC seems to apply the configure so not sure what the warning message really indicates.

---
Originally reported by ahammar, imported from: Can't handle class jenkins.security.plugins.ldap.FromGroupSearchLDAPGroupMembershipStrategy#authoritiesPopulator

• status: Open
  
• priority: Minor
  
• component(s): ldap-plugin
  
• label(s): jcasc-compatibility
  
• resolution: Unresolved
  
• votes: 1
  
• watchers: 3
  
• imported: 2025-12-09
  

Raw content of original issue

During startup when JCasC loads configuration (se below) the following is logged:



May 05, 2020 3:17:51 PM WARNING io.jenkins.plugins.casc.BaseConfigurator createAttribute

Can't handle class jenkins.security.plugins.ldap.FromGroupSearchLDAPGroupMembershipStrategy#authoritiesPopulator: type is abstract but not Describable.


Here's the JCasC yaml (sensitive data replaced with dummy):



jenkins:

  securityRealm:

    ldap:

      configurations:

      - server: "ldap.acme.org"

        rootDN: "dc=utv,dc=acme,dc=org"

        userSearchBase: "ou=people"

        userSearch: "uid={0}"

        groupSearchBase: "ou=group"

        groupSearchFilter: "(& (cn={0}) (objectclass=posixGroup))"

        groupMembershipStrategy:

          fromGroupSearch:

            filter: ""

        displayNameAttributeName: "cn"

        mailAddressAttributeName: "mail"

        inhibitInferRootDN: false

      userIdStrategy: "caseInsensitive"

      groupIdStrategy: "caseInsensitive"

      disableMailAddressResolver: false

      disableRolePrefixing: true

      cache:

        size: 20

        ttl: 300





However, JCasC seems to apply the configure so not sure what the warning message really indicates.

environment

```
Jenkins 2.222.3 on RHEL7 and openJdk 1.8

LDAP plugin v1.24

JCasc plugin v1.39
```

Start by reproducing the JCasC startup configuration and trace the warning from io.jenkins.plugins.casc.BaseConfigurator#createAttribute to jenkins.security.plugins.ldap.FromGroupSearchLDAPGroupMembershipStrategy#authoritiesPopulator. Compare the warning with the reported applied configuration. Done means establishing whether the warning reflects a real LDAP configuration problem and verifying the expected behavior.

Written by the indexing model from the issue text.