简体繁体 English

如何在配置为使用LDAP作为用户数据库的Jenkins上添加外部用户？

[英]How can I add external users on Jenkins which is configured to use LDAP as user database?

原文 2014-01-16 09:04:09 3 2 authentication/ jenkins/ ldap/ external

I'm setting up a Jenkins server for a project of my company. 我正在为我公司的项目设置Jenkins服务器。 I configured the security realm to use LDAP and had no problem until we decided to hire external development team along with our devs. 我将安全领域配置为使用LDAP，并且在我们决定与我们的开发人员一起聘请外部开发团队之前没有问题。 We cannot create LDAP accounts for them for some reasons, however it is essential to use CI server together to collaborate and to get benefits of using CI server. 由于某些原因，我们不能为它们创建LDAP帐户，但是，必须将CI服务器一起使用才能进行协作并获得使用CI服务器的好处。

Is it possible to add external users who are not in LDAP? 是否可以添加不在LDAP中的外部用户？

I can think of only one solution so far. 到目前为止，我只能想到一种解决方案。

use 'Jenkins's own user database' instead of 'LDAP' and create all users manually. 使用“詹金斯自己的用户数据库”而不是“ LDAP”，并手动创建所有用户。

Any other solutions for this situations? 对于这种情况还有其他解决方案吗？

2 个解决方案

Seems like PAM is the way to go. 好像PAM是要走的路。

I haven't done it and am looking into doing it, but here is a suggestion from the lead Jenkins developer: http://jenkins-ci.361315.n4.nabble.com/Mixed-mode-authentication-td3447248.html 我还没有做，正在研究，但是这是詹金斯首席开发人员的建议： http : //jenkins-ci.361315.n4.nabble.com/Mixed-mode-authentication-td3447248.html

I don't think so , probably the best you can do it try to persuade your network security team to add the external development team to your LDAP system giving them a different security role. 我不这么认为，可能是您最好的尝试，是说服您的网络安全团队将外部开发团队添加到LDAP系统中，从而赋予他们不同的安全角色。

For example you could create roles for jenkins_admin, jenkins_staff, jenkins_contractor and then give them different privileges but without rights to other resources. 例如，您可以为jenkins_admin，jenkins_staff，jenkins_contractor创建角色，然后为他们赋予不同的特权，但无权使用其他资源。

How will you allow your external development team to commit to your SCM? 您将如何允许您的外部开发团队致力于SCM？