Mantis - git
Viewing Issue Advanced Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
4943 regular use major always 2012-05-15 11:59 2014-09-22 11:21
Reporter: kaempfer Platform:  
Assigned To: bwalton OS:  
Priority: normal OS Version:  
Status: feedback Product Version:  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
Summary: 0004943: git-remote-https doesn't accept passwords longer than 8 charakters
Description: We want to use git with https and ldap authenfication.
I installed CSWgit 1.7.10.2,REV=2012.05.12. (sparc, solaris 10)
It seems, that git-remote-https doesn't work with passwords longer than 8 characters. With 8 characters it works.

Example: password 9 characters
bash-3.2$ git clone https://bellus3/git/myrepo.git [^]
Cloning into 'myrepo'...
Username for 'https://bellus3': [^]
Password for 'https://kaempfer@bellus3': [^]
fatal: Authentication failed
bash-3.2$

Example: password 8 characters
bash-3.2$ git clone https://bellus3/git/myrepo.git [^]
Cloning into 'myrepo'...
Username for 'https://bellus3': [^]
Password for 'https://student@bellus3': [^]
remote: Counting objects: 9, done.
remote: Compressing objects: 100% (5/5), done.
remote: Total 9 (delta 0), reused 0 (delta 0)
Unpacking objects: 100% (9/9), done.
bash-3.2$
Steps To Reproduce:
Additional Information: curl -u user https:....
works with passwords 8 and more characters
Relationships
Attached Files:
Issue History
Date Modified Username Field Change
2012-05-15 11:59 kaempfer New Issue
2012-07-26 02:59 bwalton Status new => assigned
2012-07-26 02:59 bwalton Assigned To => bwalton
2012-07-26 03:01 bwalton Note Added: 0010059
2012-07-26 03:01 bwalton Status assigned => feedback
2012-07-28 03:50 bwalton Note Added: 0010062
2012-07-30 15:52 bwalton Note Added: 0010067
2012-07-31 01:33 bwalton Note Added: 0010068
2014-01-10 16:30 hansgus Note Added: 0010680
2014-09-22 11:21 maciej Note Added: 0010920

Notes
(0010059)
bwalton   
2012-07-26 03:01   
Could you provide a truss (with -ff) of the failing call? If regular curl works but git clone doesn't, that's very strange. Also, do you by any chance have a public facing repository with this configuration that I could use in my own diagnosis?

Thanks
-Ben
(0010062)
bwalton   
2012-07-28 03:50   
Thanks for the truss files and the credentials to use during testing. I've narrowed this down a bit further. It seems that interactive prompting does indeed fail, but if I place the same credentials in ~/.netrc, they work and the repository is cloned.

I'm still looking for the root of the problem, but I'm now focussing on curl itself.

Thanks
-Ben
(0010067)
bwalton   
2012-07-30 15:52   
I've found the bug in git and will try to resolve it tonight. It is not related to curl at all as I'd previously suspected.
(0010068)
bwalton   
2012-07-31 01:33   
The problem should be solved now. Please test the packages here: http://buildfarm.opencsw.org/experimental.html#git [^]

I'll push these in a day or so regardless, but I'd like to hear that it works for you too.
(0010680)
hansgus   
2014-01-10 16:30   
The same issue seems to affect the latest version (1.7.10.3,REV=2012.06.01) for Solaris 9 also. I have tried with 8 and 9 characters in the password and the one with 9 does not work. It does however work with 9 characters in ~/.netrc. Any chance of this being fixed for Solaris 9?
(0010920)
maciej   
2014-09-22 11:21   
FYI this bug blocks git packages from being integrated into testing. Is this a regression with regard to the version in the testing catalog? If not, consider lowering the severity of the bug below Major.