Comments (3)
Depending on how your AD auth is set up, you may be able to use the new username@domain
syntax for the username instead of the DOMAIN\username
syntax.
I know this works for general sign-in if your organization uses Azure AD, so I think it should work for what you are trying to do with Checkmarx as well. (I don't know how traditional on-premise AD would behave if given a new-style username.)
Give this a go and let me know if it works
from aws-secrets-manager-credentials-provider-plugin.
Had already tried the @Domain notation. That is allowed in tag value, but Checkmarx doesn't understand it. It probably verifies it against local database as an username looking like email address. In the windows world they often get treated as equivalents, but they are not. The DOMAIN\username is an (older) notation based of NetBios (which can be disabled). Where the username@fqdn domain notation is a UPN notation. Possible to map a user against multiple domains. regardless of this, it would be better to keep the username as a secret from a security perspective. Tags are unencrypted and less protected from prying eyes than secrets. Knowing a valid username is half the battle when you try to brute force access by guessing username-password combinations.
from aws-secrets-manager-credentials-provider-plugin.
It sounds like the first port of call is to raise this with Checkmarx, to get a definitive answer on how Checkmarx handles user@domain usernames. They may well decide that there is a bug that needs fixing. Could you provide more details about which specific Checkmarx products or components you are using with your Jenkins job? (That will indicate whether we need to raise a GitHub Issue on the relevant repo, or send an email to Checkmarx support.)
from aws-secrets-manager-credentials-provider-plugin.
Related Issues (20)
- Can we pass googleoauth2 parameters in the helm chart with this plugin HOT 2
- when we use filters option and deploy jenkins with configuration as code, plugin is not able to read if secrets are more than 10 HOT 6
- Support AWS credentials HOT 2
- Icons don't display for "SSH User Private Key" & "Certificate" credentials types HOT 4
- Support for browerstack credential kind HOT 2
- Cross-account role access doesn't appear to work HOT 3
- Make this plugin configurable at folder level, not just centrally HOT 7
- AWS EKS 1.24 client is not respecting jenkins-master pod role HOT 5
- casc config reports improper filter value HOT 5
- reading json secrets HOT 2
- Support the popular AmazonWebServicesCredentialsBinding credential types HOT 2
- SSH Keys not working with sshagent
- Ability to set STS endpoint
- The plugin does not pick up Jenkins' proxy settings HOT 4
- Content goes to 404 in Jenkins's documentation
- File Credentials stored in AWS cannot be validated HOT 3
- Don't remove credentials during temporary issues HOT 3
- Github app credentials integrations HOT 1
- "Could not list credentials in Secrets Manager" HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aws-secrets-manager-credentials-provider-plugin.