[JENKINS-58932] Unable to Login After Upgrade from 2.176.1 to 2.176.2/2.176.3

[timja]

The following stack trace is displayed within the Jenkins UI when Jenkins is restarted after the upgrade from 2.176.1 to 2.176.2:

com.thoughtworks.xstream.mapper.CannotResolveClassException: com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategycom.thoughtworks.xstream.mapper.CannotResolveClassException: com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategy at com.thoughtworks.xstream.mapper.DefaultMapper.realClass(DefaultMapper.java:79) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.DynamicProxyMapper.realClass(DynamicProxyMapper.java:55) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.PackageAliasingMapper.realClass(PackageAliasingMapper.java:88) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.ClassAliasingMapper.realClass(ClassAliasingMapper.java:79) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.ArrayMapper.realClass(ArrayMapper.java:74) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.SecurityMapper.realClass(SecurityMapper.java:71) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at hudson.util.XStream2$CompatibilityMapper.realClass(XStream2.java:379) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at hudson.util.xstream.MapperDelegate.realClass(MapperDelegate.java:43) at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30) at com.thoughtworks.xstream.mapper.CachingMapper.realClass(CachingMapper.java:48) at hudson.util.RobustReflectionConverter.determineType(RobustReflectionConverter.java:459) at hudson.util.RobustReflectionConverter.doUnmarshal(RobustReflectionConverter.java:325)Caused: jenkins.util.xstream.CriticalXStreamException: com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategy : com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategy

---- Debugging information ----

message             : com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategy

cause-exception     : com.thoughtworks.xstream.mapper.CannotResolveClassException

cause-message       : com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategy

class               : hudson.model.Hudson

required-type       : hudson.model.Hudson

converter-type      : hudson.util.RobustReflectionConverter

path                : /hudson/authorizationStrategy

line number         : 14

version             : not available

------------------------------

at hudson.util.RobustReflectionConverter.doUnmarshal(RobustReflectionConverter.java:354) at hudson.util.RobustReflectionConverter.unmarshal(RobustReflectionConverter.java:268) at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:72) at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:65) at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:66) at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:50) at com.thoughtworks.xstream.core.TreeUnmarshaller.start(TreeUnmarshaller.java:134) at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.unmarshal(AbstractTreeMarshallingStrategy.java:32) at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1189) at hudson.util.XStream2.unmarshal(XStream2.java:161) at hudson.util.XStream2.unmarshal(XStream2.java:132) at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1173) at hudson.XmlFile.unmarshal(XmlFile.java:178)Caused: java.io.IOException: Unable to read /var/lib/mesos/slaves/84fb42ea-dfce-42a3-ac36-fe76f1411983-S0/frameworks/b1e29b6d-97bb-4b26-a196-73bdea44f51a-0000/executors/inetu-jenkins.8b7f3cbc-be0b-11e9-af16-005056a67c5b/runs/88c02d8b-cb22-4939-915f-061dd18674a0/jenkins-version-upgrades-4283547955fbb8ab8140049a77bbc3aacafa52c0/config.xml at hudson.XmlFile.unmarshal(XmlFile.java:181) at hudson.XmlFile.unmarshal(XmlFile.java:161) at jenkins.model.Jenkins.loadConfig(Jenkins.java:3043) at jenkins.model.Jenkins.access$1200(Jenkins.java:310) at jenkins.model.Jenkins$13.run(Jenkins.java:3145) at org.jvnet.hudson.reactor.TaskGraphBuilder$TaskImpl.run(TaskGraphBuilder.java:169) at org.jvnet.hudson.reactor.Reactor.runTask(Reactor.java:296) at jenkins.model.Jenkins$5.runTask(Jenkins.java:1095) at org.jvnet.hudson.reactor.Reactor$2.run(Reactor.java:214) at org.jvnet.hudson.reactor.Reactor$Node.run(Reactor.java:117) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:748)Caused: org.jvnet.hudson.reactor.ReactorException at org.jvnet.hudson.reactor.Reactor.execute(Reactor.java:282) at jenkins.InitReactorRunner.run(InitReactorRunner.java:48) at jenkins.model.Jenkins.executeReactor(Jenkins.java:1129) at jenkins.model.Jenkins.(Jenkins.java:936) at hudson.model.Hudson.(Hudson.java:85) at hudson.model.Hudson.(Hudson.java:81) at hudson.WebAppMain$3.run(WebAppMain.java:233)Caused: hudson.util.HudsonFailedToLoad at hudson.WebAppMain$3.run(WebAppMain.java:250)

Also, the following have been added to the `plugins` directory after the restart which I suspect should not be required since the plugins are already at the latest version or not installed/needed, such as the `windows-slaves` plugin.  This may be related to what is in the `detached-plugins` directory.  The newly downloaded plugins in the `plugins` directory are :

rw-rr- 1 root root 79681 Aug 14 14:38 matrix-auth.jpi
rw-rr- 1 root root 101895 Aug 14 14:38 ldap.jpi
rw-rr- 1 root root 332039 Aug 14 14:38 junit.jpi
rw-rr- 1 root root 69669 Aug 14 14:38 jdk-tool.jpi
rw-rr- 1 root root 38296 Aug 14 14:38 command-launcher.jpi
rw-rr- 1 root root 949638 Aug 14 14:38 windows-slaves.jpi
rw-rr- 1 root root 1030550 Aug 14 14:38 pam-auth.jpi
rw-rr- 1 root root 238601 Aug 14 14:38 matrix-project.jpi
rw-rr- 1 root root 116002 Aug 14 14:38 mailer.jpi
rw-rr- 1 root root 38073 Aug 14 14:38 javadoc.jpi
rw-rr- 1 root root 55546 Aug 14 14:38 external-monitor-job.jpi
rw-rr- 1 root root 3387826 Aug 14 14:38 bouncycastle-api.jpi
rw-rr- 1 root root 90421 Aug 14 14:38 ant.jpi
rw-rr- 1 root root 112483 Aug 14 14:38 antisamy-markup-formatter.jpi
drwxr-xr-x 4 root root 4096 Aug 14 14:38 windows-slaves
drwxr-xr-x 4 root root 4096 Aug 14 14:38 antisamy-markup-formatter
drwxr-xr-x 4 root root 4096 Aug 14 14:38 external-monitor-job
drwxr-xr-x 4 root root 4096 Aug 14 14:38 pam-auth
drwxr-xr-x 4 root root 4096 Aug 14 14:38 ant
drwxr-xr-x 4 root root 4096 Aug 14 14:38 javadoc

 

I suspect the issue is caused by the `RoleBasedAuthorizationStrategy` in use and the changes made in `/core/src/main/java/hudson/ClassicPluginStrategy.java` and `/core/src/main/java/hudson/Functions.java`. 

 

Attached is the config.xml file with sensitive information redacted

 

 

---

Originally reported by jduffield, imported from: Unable to Login After Upgrade from 2.176.1 to 2.176.2/2.176.3

• status: Open
• priority: Major
• resolution: Unresolved
• imported: 2022/01/10

[timja]

tommyhwan:

My problem is similar - after upgrading Jenkins from 2.176.1 to 2.176.2, users are not able to login and error prompted as "invalid user id or password". We are using Active Directory Plugin (v2.16).

I rolled back the version to 2.176.1 and login issue vanished.

[timja]

jduffield:

Just a note that the same error is also received when upgrading from 2.176.1 to 2.176.3