jam jam
created JENKINS-21560
Git Client 1.5.0+ does not work with Kerberos anymore (empty password in netrc)
Issue Type:
Bug
Assignee:
Nicolas De Loof
Components:
git-client
Created:
29/Jan/14 10:06 PM
Description:
We are using Kerberos authentication for GIT over HTTPS. We had the setup working with Jenkins plugins git-client 1.0.7 and git 1.4.0.
It seems, since git-client 1.5.0 this type of authentication is broken for GIT in Jenkins. Our Jenkins uses a Kerberos keytab and its netrc contains the Jenkins' Kerberos username, but without password, example for netrc:
machine git.example.com
login JENKINS/jenkins.example.com
Since 1.5.0 git-client tries to pass this empty/missing password to our Webserver (Apache with mod_auth_kerb) and (of course) fails at authentication (HTTP 401).
Commit a3d3d54 (replace "clone" by "init+fetch" so we can configure git to use a local gitcrendentials store) introduces some new credential handling arround netrc. So I think the problem is from this commit, but I'm not 100% sure.
Environment:
Ubuntu 12.04 LTS amd64
Project:
Jenkins
Priority:
Major
Reporter:
jam jam
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira
--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.