Wednesday, December 25, 2019
Adding ActiveDirectory users to Jenkins
I work(ed) at a Windows-centric organization. Jenkins running on Windows can cause quite a stir.
When adding AD users to Jenkins under Configure Global Security, the first problem you’ll encounter is, in Jenkins, users are case-sensitive. That means if your AD user is JOHN, you’ll need to add both JOHN and john, otherwise when the user decides to login with small case, it won’t work.
A bigger problem is, once you cross about 50 users, you’ll start getting exception as documented in JENKINS-26963 - Form too large 213549>200000. The quick fix is to add a JVM parameter to jenkins.xml. If you’re running Jenkins behind jetty on Windows, you actually need to do this instead:
prunmgr.exe //ES//Jenkins
(You can get the edit string from Windows services)
Funnily enough, if you visit https://wiki.jenkins.io/display/JENKINS/Jetty, the lone comment on that page addresses the above. Considering Jenkins is bundled on Jetty you would think this was better documented.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment