HUDSON: how to manually encode the LDAP managerPassword?

Question

I need to know how to manually encode the LDAP managerPassword which controls the authentication to hudson:

<securityRealm class="hudson.security.LDAPSecurityRealm">
    <server>ldap.example.org</server>
    <rootDN>dc=example,dc=org</rootDN>
    <userSearchBase>ou=People</userSearchBase>
    <userSearch>uid={0}</userSearch>
    <groupSearchBase>ou=Groups</groupSearchBase>
    <managerDN>cn=admin,dc=example,dc=org</managerDN>
    <managerPassword>{HOW DO I ENCODE THIS?}</managerPassword>
</securityRealm>

This question has already been raised here: http://jenkins.361315.n4.nabble.com/How-to-encode-the-LDAP-managerPassword-td2295570.html

The answer was to configure the managerPassword field via the hudson web interface. The problem we have is that in order to configure LDAP one must be authenticated to hudson, which we cannot do because our LDAP authentication is currently broken (password mismatch between LDAP and the hudson configuration).

Can someone explain how to manually encode the LDAP managerPassword?

Thanks

score 3 · Answer 1 · answered Sep 12 '12 at 14:57

3

Password value is base64 encoded. You can encode it online: www.base64encode.org and decode it here: www.base64decode.org.

answered Sep 12 '12 at 14:57

farfocel

31
2

Denis Kot · Answer 2 · 2019-01-23T14:54:15.513

1

I found how to do this. This is simply base64. But linux's console base64 adds padding characters while in jenkins config.xml is stored without it. So I had to use perl's base64:

perl -e 'use MIME::Base64; print encode_base64('password');'

edited Jan 23 '19 at 14:54

answered Mar 21 '12 at 10:42

Denis Kot

124
5

Eduardo Ivanec · Answer 3 · 2011-05-20T12:02:36.760

0

Try using slappasswd. It should get you something like rootpw {SSHA}vv2y+i6V6esazrIv70xSSnNAJE18bb2u.

http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Deployment_Guide/s1-ldap-quickstart.html

On Debian: apt-get install slapd.

edited May 20 '11 at 12:02

answered May 20 '11 at 11:50

Eduardo Ivanec

14,531
1
35
42

thanks for the suggestion. unfortunately, by looking at an example for which I know the password (short one) have the corresponding managerPassword (long string ending up with ==) it looks like there is also some base64 and salt so `slappasswd` won't do the trick. – Max May 23 '11 at 08:22
did you solve this? I need to do the same. – Denis Kot Mar 20 '12 at 15:58

HUDSON: how to manually encode the LDAP managerPassword?

3 Answers3