Details

    • Type: Bug
    • Status: Resolved
    • Priority: Normal
    • Resolution: Fixed
    • Affects Version/s: 4.7.1
    • Fix Version/s: 4.8.0
    • Component/s: Docker, Security
    • Labels:
      None
    • Environment:

      We use the "Docker Image of Artifactory PRO" and authenticate accounts through Active Directory.

    • Regression:
      Yes

      Description

      Last weekend we have upgraded Artifactory (4.3.2 -> 4.7.1).

      At our site we're using accounts containing capital letters, like ZZ_Jenkins.

      The command "docker login" using the account ZZ_Jenkins returns now:

      Error pushing to registry: token auth attempt for registry https://ota-artifactory.so.kadaster.nl:5001/v2/: https://ota-artifactory.so.kadaster.nl:5001/artifactory/api/docker/docker-prod-local2/v2/token?account=ZZ_Jenkins&scope=repository%3Asookad%2Fjenkins%3Apull%2Cpush&service=ota-artifactory.so.kadaster.nl%3A5001 request failed with status: 401 Unauthorized

      With previous versions of Artifactory the Docker authentication with the account ZZ_Jenkins succeeds.

      With Artifactory 4.7.1, the account ZZ_Jenkins is correctly authenticated when logging in through the web gui. The account name is internally administered by Artifactory with lowercase letters. Possibly the Artifactory Docker authentication subsystem does the check for authenticated accounts in a case-sensitive way now, since zz-jenkins is not equal to ZZ_Jenkins.

        Attachments

          Activity

            People

            • Assignee:
              yinona Yinon Avraham
              Reporter:
              sookad SOO Kadaster
              Assigned QA:
              Yogev Abergel (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: