anonymous is missing the Overall/Read permission

[marcelloromani]

After starting the image as per the instructions, I accessed the web interface and the following error appeared:

anonymous is missing the Overall/Read permission

I've tried disabling security in config.xml, but apparently that gets recreated with security enabled.

[nickdgriffin]

Hello,

I think this is an elusive race condition that we've been unable to reproduce where the init.groovy.d scripts collide with each other so the authentication stuff isn't setup correctly.

Are you able to consistently recreate this problem?

[rbhadti94]

Hi Nick,

Just wondering if this has been sorted yet?

I consistently come across this error when using docker-toolbox (on Windows) which uses Docker version 17.05.0-ce, build 89658be.

I run docker run -p 8080:8080 -p 50000:50000 -v /local/folder:/var/jenkins_home -d accenture/adop-jenkins:0.2.6

And when I access the page <docker-machine ip>:8000 and click on any option, I see the same error:

hudson.security.AccessDeniedException2: anonymous is missing the Overall/Read permission

I've tried the steps pointed out marcelloromani but the config.xml file keeps getting created. I'm able to consistently re-create this problem with Dockerfile version 0.2.0+.

[nickdgriffin]

It hasn't been yet, no, as it's not been possible to reproduce it consistently.

I span up the tools yesterday with Docker version 17.06.0-ce and didn't have this problem, so probably what needs to happen is someone looks into if there's a way the scripts can be sequenced - although that might be tricky as I think each one is run in a separate thread.

[MassimoSporchia]

@rbhadti94 hi, have you been able to solve it? I'm consistently getting the same error. I get it even while using Ubuntu. I've disabled every integration with ldap, Gerrit, etc. if that helps
@nickdgriffin can't we pipe every file into a single-one in the correct order inside the docker-file? I know it's horrendous but this could be an option!
And btw, what would be the correct order? (I'm trying to start it without any integration with LDAP)

[nickdgriffin]

@MassimoSporchia That could be an option, or we have one central script that calls the others.

The correct order should be to run "adop_ldap.groovy", then "role_based_auth.groovy", then "adop_general.groovy", then everything else I think - really it's just whatever order means all of the scripts run correctly and apply their changes.

[RobertNorthard]

Added related issue #51