After migrating credential.xml & secret* from one jenkins to another..Facing issues of 401 unauthorized

sdobhal369 · May 27, 2023, 10:19am

Hi,

I am doing the credentials migration from one jenkins server to another. After the migration of credential.xml and secret*, I am not able to login now.

Attaching the log here…

May 27 15:25:17 env01.successive.work systemd[1]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: May 27 15:29:30 env01.successive.work jenkins[2889939]: Started Jenkins Continuous Integration Server.
2023-05-27 09:59:30.634+0000 [id=15] WARNING h.i.i.InstallUncaughtExceptionHandler#handleException: Caught unhandled exception with ID eae4fe02-ca27-436b-81d1-97b370a9e938
com.google.api.client.auth.oauth2.TokenResponseException: 401 Unauthorized
at com.google.api.client.auth.oauth2.TokenResponseException.from(TokenResponseException.java:105)
at com.google.api.client.auth.oauth2.TokenRequest.executeUnparsed(TokenRequest.java:287)
at com.google.api.client.auth.openidconnect.IdTokenResponse.execute(IdTokenResponse.java:120)
at org.jenkinsci.plugins.googlelogin.GoogleOAuth2SecurityRealm$2.onSuccess(GoogleOAuth2SecurityRealm.java:201)
at org.jenkinsci.plugins.googlelogin.OAuthSession.doFinishLogin(OAuthSession.java:110)
at org.jenkinsci.plugins.googlelogin.GoogleOAuth2SecurityRealm.doFinishLogin(GoogleOAuth2SecurityRealm.java:304)
at java.base/java.lang.invoke.MethodHandle.invokeWithArguments(MethodHandle.java:732)
at org.kohsuke.stapler.Function$MethodFunction.invoke(Function.java:397)
at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:409)
at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:207)
at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:140)
at org.kohsuke.stapler.MetaClass$11.doDispatch(MetaClass.java:558)
at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:59)
at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:770)
at org.kohsuke.stapler.Stapler.invoke(Stapler.java:900)
at org.kohsuke.stapler.MetaClass$2.doDispatch(MetaClass.java:224)
at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:59)
at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:770)
at org.kohsuke.stapler.Stapler.invoke(Stapler.java:900)
at org.kohsuke.stapler.Stapler.invoke(Stapler.java:698)
at org.kohsuke.stapler.Stapler.service(Stapler.java:248)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:590)
at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:764)
at org.eclipse.jetty.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1665)
at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:157)
at jenkins.telemetry.impl.UserLanguages$AcceptLanguageFilter.doFilter(UserLanguages.java:129)
at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)
at jenkins.security.ResourceDomainFilter.doFilter(ResourceDomainFilter.java:81)
at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)
at com.atlassian.bitbucket.jenkins.internal.applink.oauth.serviceprovider.auth.OAuth1aRequestFilter.doFilter(OAuth1aRequestFilter.java:91)
at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)
at hudson.plugins.scm_sync_configuration.extensions.ScmSyncConfigurationFilter$1.call(ScmSyncConfigurationFilter.java:49)
at hudson.plugins.scm_sync_configuration.extensions.ScmSyncConfigurationFilter$1.call(ScmSyncConfigurationFilter.java:44)
at hudson.plugins.scm_sync_configuration.ScmSyncConfigurationDataProvider.provideRequestDuring(ScmSyncConfigurationDataProvider.java:106)
at hudson.plugins.scm_sync_configuration.extensions.ScmSyncConfigurationFilter.doFilter(ScmSyncConfigurationFilter.java:44)
at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)
at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:160)
at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202)
at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635)
at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:160)
at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202)
at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635)
at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:94)
at jenkins.security.AcegiSecurityExceptionFilter.doFilter(AcegiSecurityExceptionFilter.java:52)
at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
at hudson.security.UnwrapSecurityExceptionFilter.doFilter(UnwrapSecurityExceptionFilter.java:54)
at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:126)
at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:120)
at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:100)
at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:145)
at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:101)
at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:227)
at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:221)
at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
at jenkins.security.BasicHeaderProcessor.doFilter(BasicHeaderProcessor.java:97)
at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:117)
at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87)
at hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSessionContextIntegrationFilter2.java:63)
at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)
at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:111)
at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:172)
at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202)
at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635)
at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:53)
at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202)
at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635)
at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:86)
at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202)
at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635)
at org.kohsuke.stapler.DiagnosticThreadNameFilter.doFilter(DiagnosticThreadNameFilter.java:30)
at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202)
at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635)
at jenkins.security.SuspiciousRequestFilter.doFilter(SuspiciousRequestFilter.java:38)
at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:202)
at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635)
at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:527)
at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:131)
at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:549)
at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122)
at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:223)
at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1570)
at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:221)
at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1383)
at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:176)
at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:484)
at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1543)
at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:174)
at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1305)
at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:129)
at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122)
at org.eclipse.jetty.server.Server.handle(Server.java:563)
at org.eclipse.jetty.server.HttpChannel.lambda$handle$0(HttpChannel.java:505)
at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:762)
at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:497)
at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:282)
at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:314)
at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:100)
at org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:416)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:385)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:272)
at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.produce(AdaptiveExecutionStrategy.java:194)
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:934)
at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1078)
at java.base/java.lang.Thread.run(Thread.java:833)

Can anyone help me to revert the change or what I do now!!

mawinter69 · May 27, 2023, 10:55am

Which files exactly did you copy from the old to the new instance?
Did you include all files from the folder secrets?

sdobhal369 · May 27, 2023, 10:59am

Hi thanks for the quick response.

From secret folder, I excluded the master.key and org.jenkinsci.main.modules.instance_identity.InstanceIdentity.KEY.

mawinter69 · May 27, 2023, 11:14am

I think you need the master.key as it is used to decrypt credentials

sdobhal369 · May 27, 2023, 11:17am

yes, I have tried with master.key also but no success.

Unfortunately, I have revert the changes but now it is saying that 401 unauthorized while login to the server.

mawinter69 · May 27, 2023, 12:38pm

You can disable security in the config.xml, but then you need to redo all the security settings

sdobhal369 · May 27, 2023, 12:49pm

Thanks! I have done the same, now things are working!!

Topic		Replies	Views
Intermittently receiving 401 Unauthorized from api while using a access token (PAT) Using Jenkins	9	182	September 28, 2024
Starting jobs while using Google Login plugin plus API Tokens Using Jenkins	0	317	October 30, 2023
Jenkins gsc authorize error Using Jenkins	0	125	February 7, 2024
Exception thrown when clicking create "New credentials" Kind "Username with password" Ask a question question	3	539	June 20, 2024
Jenkins 2.401.3 after upgrade issue Ask a question	2	645	December 14, 2023

After migrating credential.xml & secret* from one jenkins to another..Facing issues of 401 unauthorized

Related topics