LDAP Email

The Jenkins project announced an unresolved security vulnerability affecting the current version of this plugin (why?):
This plugin is up for adoption! We are looking for new maintainers. Visit our Adopt a Plugin initiative for more information.

LDAP Email plugin

This plugin resolves user email addresses from an LDAP directory.
It is not needed if Jenkins uses LDAP as its authentication source and user records have a standard "mail" attribute. In this case Jenkins will already find user email addresses.

Configure the plugin in the LDAP Email Lookup section in the main Jenkins settings page (Manage / Configure System).

Here's an example configuration file:

<?xml version='1.0' encoding='UTF-8'?>
<com.mtvi.plateng.hudson.ldap.Configuration>
    <server>ldap://testserver:389</server>
    <baseDN>ou=People,dc=test,dc=com</baseDN>
    <bindDN>cn=Jenkins,ou=Internal,dc=test,dc=com</bindDN>
    <bindPassword>password</bindPassword>
    <emailAttribute>mail</emailAttribute>
    <searchAttribute>uid</searchAttribute>
</com.mtvi.plateng.hudson.ldap.Configuration>

The bindDN and bindPassword elements are only required if your LDAP server does not support anonymous binding.

By default the plugin will form a distinguished name (DN) with this pattern:

<searchAttribute>=<userName>,<baseDN>

However, there are environments where you need to perform an LDAP search. To do this, check the "Perform Search" checkbox in the config settings, which adds a performSearch element to the configuration file:

<?xml version='1.0' encoding='UTF-8'?>
<com.mtvi.plateng.hudson.ldap.Configuration>
    <server>ldap://testserver:389</server>
    <baseDN>dc=test,dc=com</baseDN>
    <bindDN>cn=Jenkins,ou=Internal,dc=test,dc=com</bindDN>
    <bindPassword>password</bindPassword>
    <emailAttribute>mail</emailAttribute>
    <searchAttribute>uid</searchAttribute>
        <performSearch>true</performSearch>
</com.mtvi.plateng.hudson.ldap.Configuration>

This will perform a subtree-scoped search within the baseDN with the filter

<searchAttribute>=<userName>

Version History

Version 0.8 (July 9, 2014)
  • Add git(hub) scm support in pom; remove relativePath
  • Fix for Hide & encrypt Bind Password (JENKINS-5492)
Version 0.7 (February 14, 2011)
  • Translation update (French)
Version 0.6 (January 31, 2010)
  • Update code for more recent Hudson
Version 0.5 (January 20, 2009)
  • Add configuration UI
Version 0.4 (September 30, 2008)
  • All logging is done at the INFO level.
Version 0.3 (September 25, 2008)
  • More logging
Version 0.2 (September 19, 2008)
  • Adding search support
  • Adding more verbose logging
  • Fixing bug where emailAttribute configuration option was ignored in some circumstances
Version 0.1 (June 20, 2008)
  • Initial release