Re: Jenkins: How to restrict ssh credentials use in slave node configuration

[martin flehmig]

Am 14.07.2014 21:29, schrieb Daniel Beck:
> 
> On 14.07.2014, at 16:25, martin flehmig <martin.fleh...@tu-dresden.de> wrote:
> 
>> 8) Login as userA and create slave node called nodeA:
>> * Configure nodeA:
>>  * Launch method: Launch slave agents on Unix machines via SSH
>>  * Host: dummyh...@dummydomain.de
>>  * Add Credentials:
>>    - Username with password
>>    - Scope: System
>>    - Username: userA
>>    - description: userA@dummNode
> 
> What you need to do is create the credentials ahead of time from the 'Manage 
> Credentials' link on the side bar. There, create a credentials domain, 
> specify a host name restriction of
'dummyHost.dummyDomain.de', and add the credential for the host there.
Repeat for the second host in a second credential domain. Then, only the
credential in the matching domain will be offered to users configuring
each slave.


Okay, following your suggestion this is what I tried:

8) Login as userA
  * Create credentials domain
    * Specification Hostname: dummyHost.dummyDomain.de
    * Add some credentials:
      * Scope: System
      * Username: userA
      * Description: us...@dummyhost.dummydomain.de

  * Create slave node called nodeA:
    * Configure nodeA:
      * Launch method: Launch slave agents on Unix machines via SSH
      * Host: dummyHost.dummyDomain.de
      * The credentials (us...@dummyhost.dummydomain.de) are shown as
expected and can be successfully used to launch that slave node.
  * Save and log out

9) Login as userB
  * Create slave node called nodeB:
    * Configure nodeB:
      * Launch method: Launch slave agents on Unix machines via SSH
      * Host: dummyHost.dummyDomain.de
      * There you can see and use the credentials
us...@dummyhost.dummydomain.de!!


As I mentioned at the very beginning of this discussion: The slave nodes
are the very same machines, but the ssh credentials differ because of
the different projects. Therefor host name restriction of
'dummyHost.dummyDomain.de' in credentials domain is not working. Or is
there some kind of trick to restrict the credentials to 'login@maschine'?

(UserA has to use us...@dummyhost.dommynode.de to launch nodeA and userB
has to use us...@dummyhost.dummynode.de to launch nodeB, respectively.)

Thanks,
martin

smime.p7s
Description: S/MIME Cryptographic Signature