how to disable the “CSRF protection ” in jenkins by default
I need to disable the CSRF protection in jenkins, which is enabled by default.
The problem is after containerizing this, when ever i spun up a new container with jenkins inside it, it throws a "No valid crumb " error.
i am currenty using this cmd to turn on the jenkins application.
/usr/bin/java -server -Djava.net.preferIPv4Stack=true -Dhudson.security.csrf.GlobalCrumbIssuerConfiguration=false -jar /usr/share/jenkins/jenkins.war --webroot=/var/cache/jenkins/war --httpPort=9090 --ajp13Port=-1
debian jenkins
asked May 16 '18 at 15:31
Mohammed AliMohammed Ali
171120
bumped to the homepage by Community♦ 9 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
add a comment |
I need to disable the CSRF protection in jenkins, which is enabled by default.
The problem is after containerizing this, when ever i spun up a new container with jenkins inside it, it throws a "No valid crumb " error.
i am currenty using this cmd to turn on the jenkins application.
/usr/bin/java -server -Djava.net.preferIPv4Stack=true -Dhudson.security.csrf.GlobalCrumbIssuerConfiguration=false -jar /usr/share/jenkins/jenkins.war --webroot=/var/cache/jenkins/war --httpPort=9090 --ajp13Port=-1
debian jenkins
asked May 16 '18 at 15:31
Mohammed AliMohammed Ali
171120
bumped to the homepage by Community♦ 9 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
1
"Manage Jenkins" > "Configure Global Security": is "Prevent Cross Site Request Forgery exploits" selected? If it is, deselect it.
– hoefling
May 19 '18 at 12:37
I need a cli based cmd to disable that,, as the Jenkins is running behind kube proxy it keeps on crashing during the initial installation...
– Mohammed Ali
May 19 '18 at 23:04
add a comment |
I need to disable the CSRF protection in jenkins, which is enabled by default.
The problem is after containerizing this, when ever i spun up a new container with jenkins inside it, it throws a "No valid crumb " error.
i am currenty using this cmd to turn on the jenkins application.
/usr/bin/java -server -Djava.net.preferIPv4Stack=true -Dhudson.security.csrf.GlobalCrumbIssuerConfiguration=false -jar /usr/share/jenkins/jenkins.war --webroot=/var/cache/jenkins/war --httpPort=9090 --ajp13Port=-1
debian jenkins
asked May 16 '18 at 15:31
Mohammed AliMohammed Ali
171120
I need to disable the CSRF protection in jenkins, which is enabled by default.
The problem is after containerizing this, when ever i spun up a new container with jenkins inside it, it throws a "No valid crumb " error.
i am currenty using this cmd to turn on the jenkins application.
/usr/bin/java -server -Djava.net.preferIPv4Stack=true -Dhudson.security.csrf.GlobalCrumbIssuerConfiguration=false -jar /usr/share/jenkins/jenkins.war --webroot=/var/cache/jenkins/war --httpPort=9090 --ajp13Port=-1
debian jenkins
debian jenkins
asked May 16 '18 at 15:31
Mohammed AliMohammed Ali
171120
asked May 16 '18 at 15:31
Mohammed AliMohammed Ali
171120
asked May 16 '18 at 15:31
Mohammed AliMohammed Ali
171120
asked May 16 '18 at 15:31
Mohammed AliMohammed Ali
171120
asked May 16 '18 at 15:31
Mohammed AliMohammed Ali
171120
171120
bumped to the homepage by Community♦ 9 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
bumped to the homepage by Community♦ 9 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
1
"Manage Jenkins" > "Configure Global Security": is "Prevent Cross Site Request Forgery exploits" selected? If it is, deselect it.
– hoefling
May 19 '18 at 12:37
I need a cli based cmd to disable that,, as the Jenkins is running behind kube proxy it keeps on crashing during the initial installation...
– Mohammed Ali
May 19 '18 at 23:04
add a comment |
1
"Manage Jenkins" > "Configure Global Security": is "Prevent Cross Site Request Forgery exploits" selected? If it is, deselect it.
– hoefling
May 19 '18 at 12:37
I need a cli based cmd to disable that,, as the Jenkins is running behind kube proxy it keeps on crashing during the initial installation...
– Mohammed Ali
May 19 '18 at 23:04
1
1
"Manage Jenkins" > "Configure Global Security": is "Prevent Cross Site Request Forgery exploits" selected? If it is, deselect it.
– hoefling
May 19 '18 at 12:37
"Manage Jenkins" > "Configure Global Security": is "Prevent Cross Site Request Forgery exploits" selected? If it is, deselect it.
– hoefling
May 19 '18 at 12:37
I need a cli based cmd to disable that,, as the Jenkins is running behind kube proxy it keeps on crashing during the initial installation...
– Mohammed Ali
May 19 '18 at 23:04
I need a cli based cmd to disable that,, as the Jenkins is running behind kube proxy it keeps on crashing during the initial installation...
– Mohammed Ali
May 19 '18 at 23:04
add a comment |
1 Answer
1
active
oldest
votes
Adding to @hoefling, after the "Prevent Cross Site Request Forgery" parameter is deselected. Save it.
Goto Manage Jenkins and click on Reload Configuration from Disk.
Hope this helps :).
answered Jul 23 '18 at 10:54
DipanDipan
12
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f444177%2fhow-to-disable-the-csrf-protection-in-jenkins-by-default%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Adding to @hoefling, after the "Prevent Cross Site Request Forgery" parameter is deselected. Save it.
Goto Manage Jenkins and click on Reload Configuration from Disk.
Hope this helps :).
answered Jul 23 '18 at 10:54
DipanDipan
12
add a comment |
Adding to @hoefling, after the "Prevent Cross Site Request Forgery" parameter is deselected. Save it.
Goto Manage Jenkins and click on Reload Configuration from Disk.
Hope this helps :).
answered Jul 23 '18 at 10:54
DipanDipan
12
add a comment |
Adding to @hoefling, after the "Prevent Cross Site Request Forgery" parameter is deselected. Save it.
Goto Manage Jenkins and click on Reload Configuration from Disk.
Hope this helps :).
answered Jul 23 '18 at 10:54
DipanDipan
12
Adding to @hoefling, after the "Prevent Cross Site Request Forgery" parameter is deselected. Save it.
Goto Manage Jenkins and click on Reload Configuration from Disk.
Hope this helps :).
answered Jul 23 '18 at 10:54
DipanDipan
12
edited Jul 23 '18 at 13:04
answered Jul 23 '18 at 10:54
DipanDipan
12
answered Jul 23 '18 at 10:54
DipanDipan
12
answered Jul 23 '18 at 10:54
DipanDipan
12
12
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f444177%2fhow-to-disable-the-csrf-protection-in-jenkins-by-default%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
"Manage Jenkins" > "Configure Global Security": is "Prevent Cross Site Request Forgery exploits" selected? If it is, deselect it.
– hoefling
May 19 '18 at 12:37
I need a cli based cmd to disable that,, as the Jenkins is running behind kube proxy it keeps on crashing during the initial installation...
– Mohammed Ali
May 19 '18 at 23:04