timja / jenkins-gh-issues-poc-06-18

0 stars 0 forks source link

[JENKINS-65827] 403 Forbidden Errors #1545

Open timja opened 3 years ago

timja commented 3 years ago

Recently, we are now experiencing 403 Forbidden response errors when trying to perform certain actions against our Jenkins master server where we would not receive these errors previously. Two examples:

Unfortunately we don't know exactly when this issue started happening because we don't perform these tasks regularly. Not being able to perform them now is preventing us from being able to deploy production environments for new clients because we register a worker node for each one. The environment variable change would be helpful as well for another requirement. Please help!


Originally reported by jeremyciak, imported from: 403 Forbidden Errors
  • status: Open
  • priority: Critical
  • resolution: Unresolved
  • imported: 2022/01/10
timja commented 3 years ago

JIRAUSER133550:

Similar and unexpected situation here: on a try to Apply/Save configuration for Slack, Jenkins shows 403. Still trying to resolve the issue on our side - spent whole day researching anything Jenkins/403 related and it go me here.

timja commented 3 years ago

JIRAUSER133031:

I have had the same issue with this version and also in 2.289.2. As a workaround, I manually logged into the Jenkins server and updated

/var/bin/jenkins/config.xml

(or other xml files in that folder for simple replacements). Make sure you back it up in case you typo .

timja commented 2 years ago

JIRAUSER140735:

We are experiencing the same issue of getting a 403 Forbidden message when trying to save/apply anything under "Configure System". Other management screens are fine. If I use the browser developer tools, these errors are showing up when loading the "Configure System" page:

 

hudson-behavior.js:1573 Unable to find nearby credentialsId
POST https://jenkins.redacted.url/descriptorByName/hudson.plugins.timestamper.TimestamperConfig/checkSystemTimeFormat 403

 

I'm not seeing these error on other management screens. We're running Jenkins version 2.337.

timja commented 2 years ago

JIRAUSER140735:

Update: Fixed this issue by enabling two settings under Global Roles that I've never seen before: "Steal" under Lockable Resources and "Plugin Usage View". These were the only two settings unchecked.