Tuesday 22 September 2015

Part 5 -- Setup Jenkins and gerrit: Secure Jenkins Installation

Installation of Jenkins is insecure. To secure it, follow below steps
  1. Go to "manage jenkins".
  2. Click "setup security".
  3. check "enable security".
  4. Check "Jenkins own user database". Also uncheck "Allow users to sign up".
  5. Go for "matrix based security"
  6. Make sure Anonymous only has the Read right under the View group (Jenkins crashes otherwise).
  7. Go to <jenkins_ip>:8080. You will see
  8. Signup. You will become administrator.

1 comment:

  1. In case you encountered error like " user is missing the Overall/Read permission"

    1. Stop Jenkins
    /etc/init.d/jenkins stop
    sudo vi /var/lib/jenkins/config.xml
    2.A. change useSecurity element's value to false
    false
    2.B. Remove authorizationStrategy block
    Start Jenkins again:
    /etc/init.d/jenkins start
    Access Jenkins through URL and reconfigure security again.

    ReplyDelete