Hello Team,
with respect to the latest vuls in log4j , we upgraded the sonarqube from version 7.9.3 to 8.9.6 .We are running it as a docker. but while logging in we are getting a timeout error .
The api is http://ourdns/admin/plugin_risk_consent
What we examined is that the login is working after upgrading it to 7.9.6
Can someone please help
Regards,
ganncamp
January 6, 2022, 6:48pm
2
Hi,
Welcome to the community!
I guess you’re using a 3rd-party plugin for authentication? If so, you’re hitting this problem:
Hi @Sergey_Subbotin ,
Welcome to the community!
In fact, this has come up internally, recently. From 8.9 there’s the requirement to accept the risk of using 3rd party plugins. But since you’re using a 3rd-party plugin to log in, there’s a conflict. As a patch, you can “pre”-accept the plugin risk consent in order to use an authentication mechanism that hinges on the plugin risk consent checkbox.
This requires setting sonar.plugins.risk.consent=ACCEPTED in the sonar.properties file.
To be hon…