Authentication 具有LDAP身份验证的jenkins API令牌

我们有

Jenkins

运行

activedirectory

authentocation，一切都很好，今天当我尝试

curl

发布文件时，它不适用于

API令牌

，但它适用于密码

我发现以下ldap错误。。有人有经验吗？但它使用纯文本密码。由于安全原因，我不想使用密码

 curl -X POST http://spatel:d606d1857409cc8ef1f2dff8aaab1cf1@server1.example.com/job/Test/config.xml --data-binary "@config.xml"

    Jun 3, 2013 2:33:01 PM hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider retrieveUser
    WARNING: Failed to retrieve user information for spatel
    javax.naming.NamingException: [LDAP: error code 1 - 00000000: LdapErr: DSID-0C090627, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, vece]; remaining name 'DC=example,DC=com'
        at com.sun.jndi.ldap.LdapCtx.mapErrorCode(Unknown Source)
        at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
        at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
        at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source)
        at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)
        at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)
        at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source)
        at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
        at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
        at hudson.plugins.active_directory.LDAPSearchBuilder.search(LDAPSearchBuilder.java:52)
        at hudson.plugins.active_directory.LDAPSearchBuilder.searchOne(LDAPSearchBuilder.java:42)
        at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:191)
        at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:130)
        at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.retrieveUser(ActiveDirectoryUnixAuthenticationProvider.java:95)
        at hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider.loadUserByUsername(AbstractActiveDirectoryAuthenticationProvider.java:27)
        at hudson.plugins.active_directory.ActiveDirectorySecurityRealm.loadUserByUsername(ActiveDirectorySecurityRealm.java:551)
        at hudson.model.User.impersonate(User.java:255)
        at jenkins.security.ApiTokenFilter.doFilter(ApiTokenFilter.java:52)

---

你找到解决办法了吗？我也对它感兴趣！经过大量的谷歌搜索，我发现了它的漏洞。。