Unfortunately, I'm on Linux, so I don't think the Active Directory plugin is an option. From what I've read, you can use it on Linux, but it just falls back to LDAP authentication.
FWIW, after updating to Jenkins 1.557, and also updating the LDAP plugin, login no longer fails. I still occasionally get long delays when logging in, and I still see the "No route to host" exception in the logs, but it doesn't prevent me from logging in. Terry On Tuesday, April 1, 2014 3:16:48 PM UTC-6, Terry Lacy wrote: > > > I'm having intermittent issues authenticating with Jenkins. I use LDAP > with Active Directory. My Jenkins server is on Ubuntu 12.04 Server, and AD > is running on Windows 2008 R2. > > When authentication fails, I see this in my logs: > > Apr 01, 2014 2:15:04 PM hudson.security.AuthenticationProcessingFilter2 > onUnsuccessfulAuthentication > INFO: Login attempt failed > org.acegisecurity.AuthenticationServiceException: LdapCallback;null; > nested exception is javax.naming.PartialResultException [Root exception is > javax.naming.CommunicationException: mysubdomain.mydomain.org:389 [Root > exception is java.net.NoRouteToHostException: No route to host]]; nested > exception is org.acegisecurity.ldap.LdapDataAccessException: > LdapCallback;null; nested exception is javax.naming > .PartialResultException [Root exception is > javax.naming.CommunicationException: mysubdomain.mydomain.org:389 [Root > exception is java.net.NoRouteToHostException: No route to host]] > at > org.acegisecurity.providers.ldap.LdapAuthenticationProvider.retrieveUser(LdapAuthenticationProvider.java:238) > at > org.acegisecurity.providers.dao.AbstractUserDetailsAuthenticationProvider.authenticate(AbstractUserDetailsAuthenticationProvider.java:122) > > Notice that it says "mysubdomain.mydomain.org:389" (I changed this from > my real domain/subdomain). mysubdomain.mydomain.org doesn't exist, and > that's not actually the address of my AD server. I actually have my LDAP > server configured using an IP address. In fact, I can't find " > mysubdomain.mydomain.org" when I grep my configuration, so I have no idea > where it's coming from, other than I suppose you could cobble it together > from the root search names. > > Am I mistaken in believing that it's trying to show the server name it's > trying to connect to in the exception? > > Any ideas? > > Terry > -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
