timja / jenkins-gh-issues-poc-06-20

0 stars 0 forks source link

[JENKINS-4714] Login into hudson failed from IE6/8 (hudson own user database) #267

Closed timja closed 10 years ago

timja commented 14 years ago

Since version 1.323 we can't login from an Internet Explorer Version 6
(unfortunitely our company default yet).
IE 8 also don't work

Using Firefox (3.5.3) or Iceweasel (3.0.14) the login works.

On IE 6 we don't get the username, always the "Login" text appears in upper
right corner.

We get no "start build" or administration rights after an login attempt that
don't report errors to the browser.

our security settings: see attachment "Security Settings"

our system: debian lenny (powered by VM-Ware Server 2.0.1)
java: java version "1.6.0_12"
Java(TM) SE Runtime Environment (build 1.6.0_12-b04)
Java HotSpot(TM) Server VM (build 11.2-b01, mixed mode)

Any ideas ?

on stdout (debian lenny, hudson 1.324) we got this for IE 6 login attempt:

Sep 21, 2009 2:54:02 PM hudson.ExpressionFactory2$JexlExpression evaluate
WARNING: Caught exception evaluating: h.hasPermission(it, permission). Reason:
java.lang.NullPointerException
java.lang.NullPointerException
at hudson.security.AuthorizationStrategy.getACL
(AuthorizationStrategy.java:102)
at hudson.model.View.getACL(View.java:269)
at hudson.model.View.hasPermission(View.java:277)
at hudson.Functions.hasPermission(Functions.java:581)
at sun.reflect.GeneratedMethodAccessor60.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke
(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at
org.apache.commons.jexl.util.introspection.UberspectImpl$VelMethodImpl.invoke
(UberspectImpl.java:258)
at org.apache.commons.jexl.parser.ASTMethod.execute(ASTMethod.java:104)
at org.apache.commons.jexl.parser.ASTReference.execute
(ASTReference.java:83)
at org.apache.commons.jexl.parser.ASTReference.value
(ASTReference.java:57)
at org.apache.commons.jexl.parser.ASTReferenceExpression.value
(ASTReferenceExpression.java:51)
at org.apache.commons.jexl.ExpressionImpl.evaluate
(ExpressionImpl.java:80)
at hudson.ExpressionFactory2$JexlExpression.evaluate
(ExpressionFactory2.java:72)
at org.apache.commons.jelly.expression.ExpressionSupport.evaluateRecurse
(ExpressionSupport.java:61)
at
org.apache.commons.jelly.expression.ExpressionSupport.evaluateAsBoolean
(ExpressionSupport.java:71)
at org.apache.commons.jelly.tags.core.IfTag.doTag(IfTag.java:41)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:262)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at org.apache.commons.jelly.TagSupport.invokeBody(TagSupport.java:186)
at org.apache.commons.jelly.tags.core.JellyTag.doTag(JellyTag.java:45)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:262)
at org.apache.commons.jelly.impl.DynamicTag.doTag(DynamicTag.java:81)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:262)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at org.apache.commons.jelly.TagSupport.invokeBody(TagSupport.java:186)
at org.apache.commons.jelly.impl.StaticTag.doTag(StaticTag.java:65)
at org.apache.commons.jelly.impl.StaticTagScript.run
(StaticTagScript.java:112)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at org.apache.commons.jelly.TagSupport.invokeBody(TagSupport.java:186)
at org.apache.commons.jelly.tags.core.JellyTag.doTag(JellyTag.java:45)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:262)
at org.apache.commons.jelly.impl.DynamicTag.doTag(DynamicTag.java:81)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:262)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at org.apache.commons.jelly.TagSupport.invokeBody(TagSupport.java:186)
at org.apache.commons.jelly.impl.StaticTag.doTag(StaticTag.java:65)
at org.apache.commons.jelly.impl.StaticTagScript.run
(StaticTagScript.java:112)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at org.kohsuke.stapler.jelly.CustomTagLibrary$StaplerDynamicTag$1.run
(CustomTagLibrary.java:147)
at org.apache.commons.jelly.tags.define.InvokeBodyTag.doTag
(InvokeBodyTag.java:91)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:262)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at org.apache.commons.jelly.TagSupport.invokeBody(TagSupport.java:186)
at org.apache.commons.jelly.tags.core.IfTag.doTag(IfTag.java:42)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:262)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at org.apache.commons.jelly.TagSupport.invokeBody(TagSupport.java:186)
at org.apache.commons.jelly.tags.core.JellyTag.doTag(JellyTag.java:45)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:262)
at org.apache.commons.jelly.impl.DynamicTag.doTag(DynamicTag.java:81)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:262)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at org.kohsuke.stapler.jelly.CustomTagLibrary$StaplerDynamicTag$1.run
(CustomTagLibrary.java:147)
at org.apache.commons.jelly.tags.define.InvokeBodyTag.doTag
(InvokeBodyTag.java:91)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:262)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at org.apache.commons.jelly.TagSupport.invokeBody(TagSupport.java:186)
at org.apache.commons.jelly.impl.StaticTag.doTag(StaticTag.java:65)
at org.apache.commons.jelly.impl.StaticTagScript.run
(StaticTagScript.java:112)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at org.apache.commons.jelly.TagSupport.invokeBody(TagSupport.java:186)
at org.apache.commons.jelly.impl.StaticTag.doTag(StaticTag.java:65)
at org.apache.commons.jelly.impl.StaticTagScript.run
(StaticTagScript.java:112)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at org.apache.commons.jelly.TagSupport.invokeBody(TagSupport.java:186)
at org.apache.commons.jelly.impl.StaticTag.doTag(StaticTag.java:65)
at org.apache.commons.jelly.impl.StaticTagScript.run
(StaticTagScript.java:112)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at org.apache.commons.jelly.TagSupport.invokeBody(TagSupport.java:186)
at org.apache.commons.jelly.impl.StaticTag.doTag(StaticTag.java:65)
at org.apache.commons.jelly.impl.StaticTagScript.run
(StaticTagScript.java:112)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at org.apache.commons.jelly.TagSupport.invokeBody(TagSupport.java:186)
at org.apache.commons.jelly.impl.StaticTag.doTag(StaticTag.java:65)
at org.apache.commons.jelly.impl.StaticTagScript.run
(StaticTagScript.java:112)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at org.apache.commons.jelly.TagSupport.invokeBody(TagSupport.java:186)
at org.apache.commons.jelly.tags.core.JellyTag.doTag(JellyTag.java:45)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:262)
at org.apache.commons.jelly.impl.DynamicTag.doTag(DynamicTag.java:81)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:262)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at org.kohsuke.stapler.jelly.CompressTag.doTag(CompressTag.java:21)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:262)
at org.kohsuke.stapler.jelly.DefaultScriptInvoker.invokeScript
(DefaultScriptInvoker.java:29)
at org.kohsuke.stapler.jelly.JellyClassTearOff.serveIndexJelly
(JellyClassTearOff.java:43)
at org.kohsuke.stapler.jelly.JellyFacet.handleIndexRequest
(JellyFacet.java:83)
at org.kohsuke.stapler.Stapler.invoke(Stapler.java:476)
at org.kohsuke.stapler.MetaClass$12.dispatch(MetaClass.java:309)
at org.kohsuke.stapler.Stapler.invoke(Stapler.java:487)
at org.kohsuke.stapler.Stapler.invoke(Stapler.java:403)
at org.kohsuke.stapler.Stapler.service(Stapler.java:116)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:45)
at winstone.ServletConfiguration.execute(ServletConfiguration.java:249)
at winstone.RequestDispatcher.forward(RequestDispatcher.java:335)
at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:378)
at hudson.util.PluginServletFilter$1.doFilter
(PluginServletFilter.java:94)
at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:86)
at winstone.FilterConfiguration.execute(FilterConfiguration.java:195)
at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:368)
at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:47)
at winstone.FilterConfiguration.execute(FilterConfiguration.java:195)
at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:368)
at hudson.security.ChainedServletFilter$1.doFilter
(ChainedServletFilter.java:84)
at hudson.security.UnwrapSecurityExceptionFilter.doFilter
(UnwrapSecurityExceptionFilter.java:51)
at hudson.security.ChainedServletFilter$1.doFilter
(ChainedServletFilter.java:87)
at org.acegisecurity.ui.ExceptionTranslationFilter.doFilter
(ExceptionTranslationFilter.java:166)
at hudson.security.ChainedServletFilter$1.doFilter
(ChainedServletFilter.java:87)
at
org.acegisecurity.providers.anonymous.AnonymousProcessingFilter.doFilter
(AnonymousProcessingFilter.java:125)
at hudson.security.ChainedServletFilter$1.doFilter
(ChainedServletFilter.java:87)
at org.acegisecurity.ui.rememberme.RememberMeProcessingFilter.doFilter
(RememberMeProcessingFilter.java:142)
at hudson.security.ChainedServletFilter$1.doFilter
(ChainedServletFilter.java:87)
at org.acegisecurity.ui.AbstractProcessingFilter.doFilter
(AbstractProcessingFilter.java:271)
at hudson.security.ChainedServletFilter$1.doFilter
(ChainedServletFilter.java:87)
at org.acegisecurity.ui.basicauth.BasicProcessingFilter.doFilter
(BasicProcessingFilter.java:173)
at hudson.security.ChainedServletFilter$1.doFilter
(ChainedServletFilter.java:87)
at
org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter
(HttpSessionContextIntegrationFilter.java:249)
at hudson.security.HttpSessionContextIntegrationFilter2.doFilter
(HttpSessionContextIntegrationFilter2.java:66)
at hudson.security.ChainedServletFilter$1.doFilter
(ChainedServletFilter.java:87)
at hudson.security.ChainedServletFilter.doFilter
(ChainedServletFilter.java:76)
at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:155)
at winstone.FilterConfiguration.execute(FilterConfiguration.java:195)
at winstone.RequestDispatcher.doFilter(RequestDispatcher.java:368)
at winstone.RequestDispatcher.forward(RequestDispatcher.java:333)
at winstone.RequestHandlerThread.processRequest
(RequestHandlerThread.java:244)
at winstone.RequestHandlerThread.run(RequestHandlerThread.java:150)
at java.lang.Thread.run(Thread.java:619)


Originally reported by wohauser, imported from: Login into hudson failed from IE6/8 (hudson own user database)
  • status: Resolved
  • priority: Major
  • resolution: Won't Fix
  • resolved: 2014-09-03T19:23:27+00:00
  • imported: 2022-06-20
timja commented 14 years ago

wohauser:

Created an attachment (id=971)
Security Settings

timja commented 14 years ago

jlpinardon:

Same behaviour with IE 8.0.6001.18702.

{{http://__:8080/ }}

displays a 403 error page
But

http://__:8080/login

displays correctly the login page

timja commented 13 years ago

evernat:

I have not reproduced the issue using "IE 8.0.6001.18702".
Have you made it to work?

timja commented 13 years ago

wohauser:

On IE 6 (OK very old, but the "have to use" browser here) login failes with jenkins version 1.396 too.
The problem is the same as reported, but no exceptions occur anymore.

IE 8 I can't test here.

timja commented 13 years ago

wohauser:

Sorry, pressed the wrong button

timja commented 12 years ago

evernat:

@wohauser
And I have not reproduced the issue using "IE 6.0.2900.5512" and Jenkins v1.440.

Is there still an issue for you?

(by the way, css styles of Jenkins are not perfect when using IE6 but they are readable)

timja commented 12 years ago

wo_hauser:

I've checked it on Jenkins 1.451 now, I unfortunately don't get error messages, but I still can't login to Jenkins using IE8 8.0.6001.18702

May be there are settings from our Sysadmins, that are hidden to me which block some actions.
(Cookies ?)

timja commented 12 years ago

evernat:

If your Sysadmins disable all cookies everywhere, I think that many apps and many internet pages would not work, so I suppose it's not that. I would ask them about your http proxies and maybe also try in IE to exclude the Jenkins url from using the http proxy.

But I do not know more, sorry.

timja commented 12 years ago

wo_hauser:

If this problem is only my problem(our company's environment problem), it may be too special to be solved.
I use a portable Firefox instead of IE so the problem is "solved" for me.

timja commented 11 years ago

djasek:

I have the same issue with IE 8.0.7601.17514. Login looks like it is successful, but I am never actually logged in. The website continues to act as if I am a guest and my user name never appears in the upper right. Logging in on Chrome in the exact same way works fine.

It looks as if the session cookie is not being stored.
This is a corporate workstation so it could definitely be an issue with a group policy, but I do not have access to that information. I do know that cookies are not blocked in general and I do not have this issue with other sites.

On further investigation, it looks like Jenkins adds 3 cookies in Chrome, after logging in. I don't have any cookies for my Jenkins server in IE. I don't see anything out of the ordinary in my settings that would do this.

timja commented 10 years ago

danielbeck:

Internet Explorer 8 is no longer supported by Jenkins, so resolving as Won't Fix. If this issue occurs on more recent versions of Internet Explorer, please file a new issue.

https://wiki.jenkins-ci.org/display/JENKINS/Browser+Compatibility+Matrix

timja commented 7 years ago

zupmargs:

Im using IE 11, But I encounter the same issue.
However, using Chrome there's no issue.