Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

Active services and builds are executed using ADMIN account

Questions
Tags
Users
Badges
vinay kumar bondugula
(73●3●29●72) retagged
Jun 28 '19, 1:24 p.m.

 Hi,


We have disabled the "ADMIN" account and using LDAP configuration for managing users. But we still observe ADMIN id in active services (as shown below) and users reported that the build history displaying the ADMIN id for couple of builds.
We are reported that the ADMIN user ID ran the build, failed and disabled the build engine. Can anyone explain why we are facing this issue or this is expected.


6bdcd4d4-2baf-4de4-bb97-5b637e671baa
com.ibm.rational.connector.hudson.HudsonSyncLoopTask com.ibm.rational.hudson.team.internal.service.HudsonSyncLoopScheduledTask.executeTask 00:00:15:250 ADMIN

adbf1c25-bbab-4db5-91f1-ec689db0c668
com.ibm.team.build.BuildResultPrunerTask com.ibm.team.build.internal.service.delete.BuildResultPrunerTask.executeTask 00:00:02:109 ADMIN

Thanks,
Vinay

0 votes

2 answers
4,825 views
0 votes

Accepted answer

Permanent link
Ralph Schoon
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER (64.6k●3●36●49) edited
Jun 12 '19, 2:38 a.m.

If you open the server administration advanced properties (of any application), you will see that there are many background tasks that have a user that run them. By default all these users are ADMIN. I have never tried to change that, but it is possible to change the user ID. 

vinay kumar bondugula selected this answer as the correct answer

0 votes

Comments
vinay kumar bondugula
Jun 12 '19, 2:54 a.m.
Thank you Ralph for the reply. Here in our environment developers are complaining that the the build engine history showing the ADMIN account in "modified by" even though ADMIN account is disabled. The build engine is deactivated by ADMIN account. The builds are started using Jenkins. The below is the message in description of the build engine which is deactivated. The question from developer is why the build engine is deactivated by ADMIN when we say account is disabled. "The system deactivated this build engine after 25 consecutive authentication failures during automatic connection tests. This setting can be changed in the server Advanced Properties for Hudson/Jenkins Builds." Thanks, Vinay 

Sridevi Sangaiah
JAZZ DEVELOPER Jun 12 '19, 5:34 a.m.
Like Ralph mentioned there are a number of background tasks that are by default run with ADMIN user credentials. There a couple of asynchronous tasks involved in the collaboration between RTC and Jenkins builds. If the asynchronous task is not able to communicate with the Jenkins build engine then it would disable the build engine, after trying to connect for a particular number of times. This is the expected behavior. Since the Jenkins build engine got disabled in the asynchronous task run with ADMIN user credentials, the modified by is recorded as ADMIN accordingly.

Ralph Schoon
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER Jun 12 '19, 6:41 a.m.
Sridevi, which advanced properties is involved in setting the user for the Jenkins related task? I am not sure. I could not find any ADMIN user ID setting in the advanced properties. Is this maybe the user used in the Jenkins Build definition? 

Sridevi Sangaiah
JAZZ DEVELOPER Jun 12 '19, 7:35 a.m.
Ralph, For jenkins related tasks we don't have an advanced property to configure the user credentials to be used. So it's always going to be the default ADMIN user, unless there is an option to configure the default user id to be used across all the async tasks, which I am not sure if exists.

Ralph Schoon
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER Jun 12 '19, 7:54 a.m.
Thanks Sridevi! 

One other answer

Permanent link
Davyd Norris
(3.8k●2●20) Jun 12 '19, 7:03 p.m.
I actually don't think the ADMIN account is the problem here.

I think the problem is in the RTC Build Engine attempting to log into the Jenkins server - the message is telling you that the build engine is failing to log in.

Check your user/password settings in the Jenkins Build Engine definition in RTC and test the connection to make sure the engine is connecting properly.



0 votes

Comments
Ralph Schoon
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER Jun 13 '19, 1:24 a.m.
Good hint, that is why I asked Is this maybe the user used in the Jenkins Build definition?

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Ask a question
Guidelines
FAQ
Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details
× 12,144
× 1,381

Question asked: Jun 11 '19, 8:08 a.m.

Question was seen: 4,825 times

Last updated: Jun 28 '19, 1:24 p.m.

Confirmation Cancel Confirm