jenkins Access Denied- asdf#gmail.com is missing the Read permission - security

i am using Jenkins war 1.520 in Ubuntu 12.04 i had configured jenkins with openid plugin and authenticated with Google apps. I made some changes in role based security and matrix based security why prompts me
Access Denied- asdf#gmail.com is missing the Read permission
please let me know, what needs to be done in order to get the access to jenkins

You will have to reconfigure your permissions. Do you still have a user with login access or not ? If not you might have to reset it by temporarily disabling the security. This can be achieved by modifying the $JENKINS_HOME/config.xml ($HOME/.jenkins/config.xml by default when running the jenkins.war on your system) and setting <useSecurity> from true to false. Be sure to backup your config!
Once you are there reenable the security, and show us what you have in matrix and role based security.

Had the same issue with Jenkins, turns out my user name was Gideon but error I was getting was 'gideon is missing the overall administer/register permission'. Edited config.xml by changing Gideon to gideon in the /hudson/authorizationStrategy/permission tags and everything is working fine now.

My permissions file was here:
/var/lib/jenkins/config.xml

As suggested in Disable security page, you need to edit config.xml in your $JENKINS_HOME (e.g. /var/lib/jenkins) and remove lines with useSecurity, authorizationStrategy and securityRealm, then restart Jenkins.
See: Jenkins Github Authentication error: user is missing the Overall/Read permission

Related

Taking over GitLab administration

Our GitLab admin (and a couple of devs) left the company recently and I have been trying to take over. How do I go about getting admin rights? I might already have them, but I'm not sure. I can ssh to our internal GitLab server, and have sudo rights. We use LDAP.
I am looking to take over a project (I am currently a developer), how would I do that?
Thanks.
You can try restoring their password
https://docs.gitlab.com/ee/security/reset_root_password.html

Forgerock - emb.creatingfamsuffix.failure Error when creating the Default Configuration

I did install AM-5.1.1 and embed it on apache-tomcat-8.5.15 port:9595… looks good. I can start it.
The issue I face is regarding the Configuration Options –> Create Default Configuration.
After entering different passwords for the default OpenAM administrator, and default Policy Agent users, I get the following error:
emb.creatingfamsuffix.failure, refer to install.log under /Users/myUserName/openam for more information.
The install.log file didn’t help that much. Any idea how to solve this?
I got this error message and it was due to the iptables service not allowing the connection. Try turning off the iptables service (if you are running Linux) quickly and trying to run the configurator again. If this solves the problem, turn them back on and add a rule to allow your openam traffic.
Fixed... I had to do with OpenDj which was not installed. Did install and works fine now.
For anyone else that may come across this issue, I received this error because I had XAMPP running. Once I quit XAMPP everything was fine.

I deny my admin overall permission in jenkins and need it back

I denied my admin overall permissions in jenkins and I can't configure it anymore.
I've tried everything here but nothing worked.
After changing <useSecurity>true</useSecurity> to <useSecurity>false</useSecurity> I can open jenkins with my job, but when I want to configure security again, and set logins, everything come back.
It happened because of Matrix-based security plugin I set before, I think I set settings for anonymous (as was written in plugin table), but it sets on admin.
Thank you in advance!

CentOS 5.6: Apache access permission after .htaccess upload

I was working on my home server remotely and wanted to make some changes to my .htaccess. I could not see this files using my FTP(filezilla) and thought there was none there. I decided to upload one I had in my computer to my server in public_html and although the upload was successful per FZ, this file is not listed anywhere, even when I physically access the server.
It looks like it is being hidden. The main problem is that after this, now I get the following error message and cannot access my test site:
You don't have permission to access / on this server.
If I access my server and DISABLE SELINUX or make it PERMISSIVE, my pages start working as normal. If I make it ENFORCING my webpage becomes unavailable and I see the error listed above.
Questions:
First of all, how can I make this .htaccess visible in a CentOS 5.6 system?
What is the difference between ENFORCING and PERMISSIVE?
Will I run into Security Risks if I leave my server setup as PERMISSIVE?
Thank you all,
Heh. No one has answered this in 4 months because it's hard to find an answer that is direct & specific (per the guidelines) and won't start a discussion. But I'll give it a try.
FileZilla can show hidden files, the method is different for different versions. Try the View or Server menu, or look for "hidden" in the built-in help.
ENFORCING means that selinux is running and prevents actions that violate its active policies. PERMISSIVE means that selinux is running and logs (but does not prevent) actions that violate its active policies.
Yes. Specifically, in ENFORCING mode, a hostile entity would have to both upload a file with malicious code and set the selinux context for the file in order to run it. In PERMISSIVE mode, they just need to upload the file. This is the most likely explanation for your experience: you uploaded a new .htaccess file, but did not set its selinux context.

Kenitico CMS not getting configured

I am configuring the Kentico CMS to my local machine but getting the following error:
The CISM115\cis account is not granted with Modify permission on folder C:\inetpub\wwwroot\KenticoCMS\. Although this is not an error, it's highly recommended that you configure these permissions.
Why is this happening and how do I fix it?
You need to change the persissions of that folder, so that the application can modify it's contents.

Resources