# Active-directory plugin error after Jenkins upgrade

**URL:** <https://community.jenkins.io/t/active-directory-plugin-error-after-jenkins-upgrade/31648>\
**Category:** Ask a question\
**Tags:** question\
**Created:** [May 22, 2025, 11:31pm UTC](https://community.jenkins.io/t/active-directory-plugin-error-after-jenkins-upgrade/31648 "2025-05-22T23:31:52Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![jenkins\_pleb](https://avatars.discourse-cdn.com/v4/letter/j/74df32/32.png) [@jenkins\_pleb](https://community.jenkins.io/u/jenkins_pleb)\
**Post date:** [May 22, 2025, 11:31pm UTC](https://community.jenkins.io/t/active-directory-plugin-error-after-jenkins-upgrade/31648/1 "2025-05-22T23:31:52Z")

</div>

Running Jenkins 2.468 on Windows, all the plugins have been upgraded to their latest.

Now attempting to upgrade Jenkins itself to latest 2.511 using the “Upgrade Automatically” button.

After restarting the Jenkins service, I see a login page and attempt to login and get the “Jenkins on fire” logo with a GUID for reference.

Looking in the jenkins.err.log, found the same GUID and this error:

```auto
2025-05-21 20:50:43.265+0000 [id=28] WARNING h.i.i.InstallUncaughtExceptionHandler#handleException: Caught unhandled exception with ID 3668f67c-d8d1-41cc-8609-a310a86b72e9
java.lang.ClassNotFoundException: org.mindrot.jbcrypt.BCrypt
    at java.base/java.net.URLClassLoader.findClass(URLClassLoader.java:445)
    at jenkins.util.URLClassLoader2.findClass(URLClassLoader2.java:64)
    at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:593)
    at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:526)
Caused: java.lang.NoClassDefFoundError: org/mindrot/jbcrypt/BCrypt
    at PluginClassLoader for active-directory//hudson.plugins.active_directory.CacheUtil.computeSalt(CacheUtil.java:74)

```

The active\_directory plugin is version 2.38. I found a suggestion to “manually install” the latest version of the active\_directory plugin (which is 2.4) by downloading the active-directory.hpi from [Active Directory](https://plugins.jenkins.io/active-directory/releases/) and dropping into the %JENKINS\_HOME%/plugins folder and restarting the Jenkins service. I tried that and the Jenkins UI gets this error (it doesn’t even show a login page anymore):

```auto

com.thoughtworks.xstream.mapper.CannotResolveClassException: hudson.plugins.active_directory.ActiveDirectorySecurityRealm
    at com.thoughtworks.xstream.mapper.DefaultMapper.realClass(DefaultMapper.java:81)
    at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:125)
    at com.thoughtworks.xstream.mapper.DynamicProxyMapper.realClass(DynamicProxyMapper.java:55)
    at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:125)
    at com.thoughtworks.xstream.mapper.PackageAliasingMapper.realClass(PackageAliasingMapper.java:88)
    at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:125)
    at com.thoughtworks.xstream.mapper.ClassAliasingMapper.realClass(ClassAliasingMapper.java:79)
    at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:125)
    at com.thoughtworks.xstream.mapper.ArrayMapper.realClass(ArrayMapper.java:74)
    at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:125)
    at com.thoughtworks.xstream.mapper.SecurityMapper.realClass(SecurityMapper.java:71)
    at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:125)
    at hudson.util.XStream2$CompatibilityMapper.realClass(XStream2.java:452)
    at hudson.util.xstream.MapperDelegate.realClass(MapperDelegate.java:46)
    at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:125)
    at com.thoughtworks.xstream.mapper.CachingMapper.realClass(CachingMapper.java:47)
    at hudson.util.RobustReflectionConverter.determineType(RobustReflectionConverter.java:551)
    at hudson.util.RobustReflectionConverter.doUnmarshal(RobustReflectionConverter.java:349)
Caused: jenkins.util.xstream.CriticalXStreamException: 
---- Debugging information ----
cause-exception : com.thoughtworks.xstream.mapper.CannotResolveClassException
cause-message : hudson.plugins.active_directory.ActiveDirectorySecurityRealm
class : hudson.model.Hudson
required-type : hudson.model.Hudson
converter-type : hudson.util.RobustReflectionConverter
path : /hudson/securityRealm
line number : 14
version : 2.511
-------------------------------
    at hudson.util.RobustReflectionConverter.doUnmarshal(RobustReflectionConverter.java:384)
    at hudson.util.RobustReflectionConverter.unmarshal(RobustReflectionConverter.java:291)
    at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:74)
    at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:72)
    at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:68)
    at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:52)
    at com.thoughtworks.xstream.core.TreeUnmarshaller.start(TreeUnmarshaller.java:136)
    at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.unmarshal(AbstractTreeMarshallingStrategy.java:32)
    at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1468)
    at hudson.util.XStream2.unmarshal(XStream2.java:230)
    at hudson.util.XStream2.unmarshal(XStream2.java:201)
    at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1445)
    at hudson.XmlFile.unmarshal(XmlFile.java:196)
Caused: java.io.IOException: Unable to read C:\Users\Jenkins_service\AppData\Local\Jenkins\.jenkins\config.xml
    at hudson.XmlFile.unmarshal(XmlFile.java:199)
    at hudson.XmlFile.unmarshal(XmlFile.java:179)
    at jenkins.model.Jenkins.load(Jenkins.java:3361)
    at jenkins.model.Jenkins$13.run(Jenkins.java:3480)
    at org.jvnet.hudson.reactor.TaskGraphBuilder$TaskImpl.run(TaskGraphBuilder.java:175)
    at org.jvnet.hudson.reactor.Reactor.runTask(Reactor.java:304)
    at jenkins.model.Jenkins$5.runTask(Jenkins.java:1149)
    at org.jvnet.hudson.reactor.Reactor$2.run(Reactor.java:221)
    at org.jvnet.hudson.reactor.Reactor$Node.run(Reactor.java:120)
    at jenkins.security.ImpersonatingExecutorService$1.run(ImpersonatingExecutorService.java:68)
    at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
    at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
    at java.base/java.lang.Thread.run(Thread.java:1583)
Caused: org.jvnet.hudson.reactor.ReactorException
    at org.jvnet.hudson.reactor.Reactor.execute(Reactor.java:290)
    at jenkins.InitReactorRunner.run(InitReactorRunner.java:49)
    at jenkins.model.Jenkins.executeReactor(Jenkins.java:1184)
    at jenkins.model.Jenkins.<init>(Jenkins.java:983)
    at hudson.model.Hudson.<init>(Hudson.java:102)
    at hudson.model.Hudson.<init>(Hudson.java:87)
    at hudson.WebAppMain$3.run(WebAppMain.java:249)
Caused: hudson.util.HudsonFailedToLoad
    at hudson.WebAppMain$3.run(WebAppMain.java:277)

```

Really hoping someone can provide some suggestions or assistance.

> **Jenkins Setup**
>
> ## Jenkins: 2.468 OS: Windows Server 2019 - 10.0 Java: 21.0.4 - Oracle Corporation (Java HotSpot™ 64-Bit Server VM)
> 
> active-directory:2.38  
> ant:511.v0a\_a\_1a\_334f41b\_  
> antisamy-markup-formatter:162.v0e6ec0fcfcf6  
> apache-httpcomponents-client-4-api:4.5.14-208.v438351942757  
> asm-api:9.7.1-97.v4cc844130d97  
> bootstrap5-api:5.3.3-1  
> bouncycastle-api:2.30.1.78.1-248.ve27176eb\_46cb\_  
> branch-api:2.1206.vd9f35001c95c  
> build-timeout:1.33  
> caffeine-api:3.2.0-161.v691ef352cee1  
> checks-api:2.2.3  
> cloudbees-folder:6.955.v81e2a\_35c08d3  
> commons-lang3-api:3.17.0-84.vb\_b\_938040b\_078  
> commons-text-api:1.13.0-150.vfc0d7966fc38  
> credentials:1384.vf0a\_2ed06f9c6  
> credentials-binding:681.vf91669a\_32e45  
> dark-theme:514.va\_3ea\_73d65dc1  
> display-url-api:2.204.vf6fddd8a\_8b\_e9  
> durable-task:581.v299a\_5609d767  
> echarts-api:5.5.1-4  
> eddsa-api:0.3.0-4.v84c6f0f4969e  
> email-ext:1849.v6dd03b\_f6e423  
> envinject:2.919.v009a\_a\_1067cd0  
> envinject-api:1.199.v3ce31253ed13  
> font-awesome-api:6.6.0-2  
> git:5.5.2  
> git-client:6.0.0  
> github:1.40.0  
> github-api:1.321-468.v6a\_9f5f2d5a\_7e  
> github-branch-source:1807.v50351eb\_7dd13  
> gradle:2.15  
> gson-api:2.11.0-85.v1f4e87273c33  
> instance-identity:201.vd2a\_b\_5a\_468a\_a\_6  
> ionicons-api:74.v93d5eb\_813d5f  
> jackson2-api:2.18.3-396.v93cc2d00b\_b\_7b\_  
> jakarta-activation-api:2.1.3-1  
> jakarta-mail-api:2.1.3-1  
> javax-activation-api:1.2.0-7  
> javax-mail-api:1.6.2-10  
> jaxb:2.3.9-1  
> jjwt-api:0.11.5-112.ve82dfb\_224b\_a\_d  
> joda-time-api:2.13.0-93.v9934da\_29b\_a\_e9  
> jquery3-api:3.7.1-2  
> json-api:20241224-119.va\_dca\_a\_b\_ea\_7da\_5  
> json-path-api:2.9.0-118.v7f23ed82a\_8b\_8  
> junit:1312.v1a\_235a\_b\_94a\_31  
> ldap:725.v3cb\_b\_711b\_1a\_ef  
> mailer:488.v0c9639c1a\_eb\_3  
> matrix-auth:3.2.3  
> matrix-project:839.vff91cd7e3a\_b\_2  
> metrics:4.2.21-458.vcf496cb\_839e4  
> mina-sshd-api-common:2.14.0-143.v2b\_362fc39576  
> mina-sshd-api-core:2.14.0-143.v2b\_362fc39576  
> msbuild:1.35  
> multiple-scms:0.8  
> nodelabelparameter:1.13.0  
> okhttp-api:4.11.0-172.vda\_da\_1feeb\_c6e  
> pam-auth:1.11  
> parameterized-trigger:806.vf6fff3e28c3e  
> pipeline-build-step:540.vb\_e8849e1a\_b\_d8  
> pipeline-github-lib:61.v629f2cc41d83  
> pipeline-graph-analysis:231.v56354571a\_da\_0  
> pipeline-graph-view:354.v2f82db\_3f59cc  
> pipeline-groovy-lib:749.v70084559234a\_  
> pipeline-input-step:508.v584c0e9a\_2177  
> pipeline-milestone-step:119.vdfdc43fc3b\_9a\_  
> pipeline-model-api:2.2218.v56d0cda\_37c72  
> pipeline-model-definition:2.2218.v56d0cda\_37c72  
> pipeline-model-extensions:2.2218.v56d0cda\_37c72  
> pipeline-stage-step:312.v8cd10304c27a\_  
> pipeline-stage-tags-metadata:2.2218.v56d0cda\_37c72  
> plain-credentials:183.va\_de8f1dd5a\_2b\_  
> plugin-util-api:5.1.0  
> powershell:2.2  
> rebuild:332.va\_1ee476d8f6d  
> resource-disposer:0.24  
> run-condition:1.7  
> scm-api:696.v778d637b\_a\_762  
> script-security:1369.v9b\_98a\_4e95b\_2d  
> snakeyaml-api:2.3-123.v13484c65210a\_  
> ssh-credentials:349.vb\_8b\_6b\_9709f5b\_  
> ssh-slaves:2.973.v0fa\_8c0dea\_f9f  
> sshd:3.330.vc866a\_8389b\_58  
> structs:338.v848422169819  
> theme-manager:262.vc57ee4a\_eda\_5d  
> timestamper:1.27  
> token-macro:400.v35420b\_922dcb\_  
> trilead-api:2.147.vb\_73cc728a\_32e  
> variant:60.v7290fc0eb\_b\_cd  
> workflow-aggregator:600.vb\_57cdd26fdd7  
> workflow-api:1358.vfb\_5780da\_64cb\_  
> workflow-basic-steps:1058.vcb\_fc1e3a\_21a\_9  
> workflow-cps:4009.v0089238351a\_9  
> workflow-durable-task-step:1378.v6a\_3e903058a\_3  
> workflow-job:1436.vfa\_244484591f  
> workflow-multibranch:795.ve0cb\_1f45ca\_9a\_  
> workflow-scm-step:427.v4ca\_6512e7df1  
> workflow-step-api:678.v3ee58b\_469476  
> workflow-support:943.v8b\_0d01a\_7b\_a\_08  
> ws-cleanup:0.47

---

<div class="post-metadata">

**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\
**Post date:** [May 22, 2025, 11:45pm UTC](https://community.jenkins.io/t/active-directory-plugin-error-after-jenkins-upgrade/31648/2 "2025-05-22T23:45:41Z")

</div>

That is usually a sign that the active-directory plugin couldn’t be loaded (there should be something in the log earlier) because it requires a newer version of a plugin it depends on. The 3 plugins are caffeine-api, ionicons-api and mailer. Make sure you have those plugins installed as well in the latest version. Worst case you have to also update the dependencies of the mailer plugin.

Others reported that first going to 2.479.x before updating to latest version avoids such problems.

Generally using LTS versions and updating them regularly leads to less problems than doing a version jump of almost over 9 month, especially when using weekly versions. E.g. the bcrypt problem hasn’t arrived in a LTS yet, bcrypt was only removed in 2.509. So if you would stick to 2.504.1 the initial problem wouldn’t appear.

---

<div class="post-metadata">

**Author:** ![kim186flora](https://avatars.discourse-cdn.com/v4/letter/k/7ba0ec/32.png) [@kim186flora](https://community.jenkins.io/u/kim186flora)\
**Post date:** [May 26, 2025, 4:07am UTC](https://community.jenkins.io/t/active-directory-plugin-error-after-jenkins-upgrade/31648/3 "2025-05-26T04:07:16Z")

</div>

Hello,

You’re using the wrong version of the Active Directory plugin.

Delete the current active-directory.hpi.

Download the latest version (2.38)

Also download the missing dependency

Place both in %JENKINS\_HOME%\plugins.

Delete any .disabled or .pinned files.

Restart

Best Regard,  
Kim

[Costco Business Centers](https://www.costcobusinesscenters.com)

---

<div class="post-metadata">

**Author:** ![jenkins\_pleb](https://avatars.discourse-cdn.com/v4/letter/j/74df32/32.png) [@jenkins\_pleb](https://community.jenkins.io/u/jenkins_pleb)\
**Post date:** [May 27, 2025, 6:10pm UTC](https://community.jenkins.io/t/active-directory-plugin-error-after-jenkins-upgrade/31648/4 "2025-05-27T18:10:03Z")

</div>

Awesome, thanks for the advice. I had thankfully made a backup of the Jenkins install and home directories prior to attempted upgrade. I reverted both of those files to get back to 2.468. Then  
I 'incrementally" upgraded Jenkins as you suggested: dropped the Jenkins 2.479.3 war file into place and restarted, updated all plugins and restarted, dropped in the Jenkins 2.504.1 war and restarted then, updated all plugins… all is well!