Replace Acegi Security with Spring Security & upgrade Spring Framework

[inakoll]

This pull request replace acegi security with Spring Security and remove deprecated/obsolete code.
See also: jenkinsci/jenkins#4848

• Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
• Ensure that the pull request title represents the desired changelog entry
• Please describe what you did
• Link to relevant issues in GitHub or Jira
• Link to relevant pull requests, esp. upstream and downstream changes
• Ensure you have provided tests - that demonstrates feature works or fixes the issue

[613andred]

Hello @wenjunxiao, @ndessart what is the status of this PR? I am very much interested in this fix.

This fix is related to JEP-227 which was a breaking change introduced in Jenkins 2.266

[ndessart]

Hi @613andred,

I've just rebased this PR (the pom.xml was in conflict with the main branch).
Since I'm just a regular user of this plugin and not a maintainer (I think @wenjunxiao is the current maintainer), I'd appreciate any feedback about this PR.

[peachy-devops]

Good Day @inakoll and @wenjunxiao

I was informed that this a potential fix for https://issues.jenkins.io/browse/JENKINS-3404
Can I get a feedback when can this be merged?
I want to use this plugin on Jenkins to use both ldap and jenkins user at the same time.

Thank you very much.

[noooonee]

Hi, is there any one looking at this? I hope this can be merged as there is an obvious issue with the latest Jenkins. Thanks.

[robertschulze]

Hi, I also have trouble using the latest Jenkins with Mixing plugin. Can this pull request be merged?
Thanks,
Robert

[tavin]

I can confirm the issue as well -- we're on Jenkins 2.332 LTS and this plugin is broken:

java.lang.NoClassDefFoundError: hudson/util/spring/BeanBuilder

Seems like the PR is on the right track to fix. Who's in charge of review?

[Schaerlis]

Hello everyone,
Is there still someone working on this fix?
I need a solution to run Jenkins with LDAP & jenkins own DB

thx

[Ocrosoft]

I have compiled and installed this revision, but it can not work with Jenkins 2.426.1:

1. Can not login with any private user.
2. LDAP works, but cache not.

I found that UserDetails.getPassword() returns hashed password with jbcrypt, the expression "u.getPassword() != password" in the code will always TRUE...

[TueDissingWork]

I am trying the this PR as well with 2.426, but here there's no option available in the security context.
Any pointers on why?