Catskul's questions

I'm in the position of needing to manage the accounts of multiple people across many different types of services, including onboarding and offboarding users. Being that we're using multiple different web-based services which are generally more user focused than company focused, I find myself looking for a tool better than a spreadsheet which will simplify the steps of creating and destroying user accounts and adjusting permissions.

We use GAFYD (google) so in a sense using single sign-on helps, but since most sites offer multiple credentials we really don't have control over accounts created with our user's GAFYD credentials, and permissions in each of the services are still an issue.

I suppose if we can remove all permissions for a certain account to linked data

• Create accounts
• Delete accounts
• Add permissions
• Remove permissions

I mounted a disk image using a few different FUSE modules and then subsequently renamed the parent directory.

The mounts have disappeared from the mtab and now the OS refuses to unmount them.

fusermount -u mnt returns:

    fusermount: entry for /home/catskul/foo/mnt not found in /etc/mtab

sudo fusermount -u mnt returns:

    fusermount: failed to unmount /home/catskul/foo/mnt: Device or resource busy

sudo fuser -a mnt returns:

    Cannot stat file /proc/986/fd/55: Permission denied
    mnt:

Just as it sounds, I'm trying to find out if there is a (standard) command that will produce a diff of the permissions between two files and/or directory trees.

Ideally it would put out a patch file that could be used to change permissions to match the target, though I'm guessing since standard patch files are interpreted by ed, that it might have to be a separate format.

While diffing mounted snapshots would work, it sounds like it could be horribly slow in many cases.

Is there btrfs specific functionality for diffing snapshots? (I was unable to find any in the docs)

How do I check the Jenkins build status without switching to the browser?

If required, I can create a script using the JSON API, but I was wondering if there is already something like this built in.

Jenkins jobs have config.xml files that store the configuration of that job.

I have a "job manager" job that modifies the configuration of other jobs, but I can't seem to get it to acknowledge the new configuration without restarting Jenkins.

The jenkins-cli.jar command line tool strangely doesn't seem to have an option for this action.

It is possible to edit the configuration through the web interface, and have that save/acknowledged without a restart, so it doesn't seem that it would be a technical impossibility.

My best try was to try and post to the same address that the web interface does

wget --post-file=config.xml --user=joe.shmoe --password=secret01 \
     --no-check-certificate                                      \
     https://jenkins.company.com/job/myProject/config.xml

...but I get a 403 despite using valid credentials (copy pasted to ensure no typos)

Anyone have any ideas or know something simple that I'm missing?

In setting up our Jenkins/Hudson server recently it became clear that it has to store passwords. It seems that it stores the passwords "ciphered" in config.xml I can't see how this would be safe as the chain of secrets has to break somewhere.

• Can Jenkins' ciphered passwords be considered "safe"?
• Is this just security through obscurity?

I should specify that we're using Jenkins 1.425.