nginx reverse proxy auth plugin

2019-10-09 Thread Uthred Ragnorson
I have nginx authenticating with kerberos ( https://github.com/stnoonan/spnego-http-auth-nginx-module) and I would like it to authenticate Jenkins. Has anyone setup Nginx/SPNEGO and Jenkins? For nginx on other products I do this proxy_set_header X-WEBAUTH-USER $remote_user; proxy_set_header Au

Re: Restrict credential retrieval to a specific slave

2019-10-09 Thread Mark Waite
I am not aware of anyone working to allow credentials to be limited to an agent. I believe the same capabilities are available by assigning the credentials to folders and then limiting user access to specific folders. Choose a credential name that should be the same in several different folders, t

winstone ssl question httpsCertificate not using keystore

2019-10-09 Thread Bernd Wahlen
i have difficulties setting up jenkins with the params --httpsPrivateKey and --httpsCertificate. (with keystore everything worked). The question is, where and how to put the certificate chain. I tried to find out here https://github.com/jenkinsci/winstone but documentation lacks in how to put t

Re: Help request for Java exception

2019-10-09 Thread David Aldrich
The exception started happening after a minor jdk upgrade: java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64 -> java-1.8.0-openjdk-1.8.0.222.b10-1.el7_7.x86_64 On Wed, Oct 9, 2019 at 1:54 PM David Aldrich wrote: > I am seeing this Java exception trace for one of our declarative scripts. > It ha

Help request for Java exception

2019-10-09 Thread David Aldrich
I am seeing this Java exception trace for one of our declarative scripts. It happens on a Centos 7 machine. Please can anyone suggest the reason? [Pipeline] End of Pipelinejava.lang.NoClassDefFoundError: Could not initialize class sun.security.ssl.SSLContextImpl$TLSContext at java.lang.Cla

Re: Restrict credential retrieval to a specific slave

2019-10-09 Thread Pietro Giannini
Hi! I just came across this post and realized this is exactly what we need. We are heavily using pipelines at our agency and being able to restrict credentials to a specific node would enable us to give total freedom the developers while keeping control of the passwords at infra level. Is ther