git/list[1] front-page[2] threads[3] people[4] search[5] about
 

git smart http + apache mod_auth_openidc

From
RERalph Ewig <ralph.phd@protonmail.com>
Date
Oct 15, 2019, 15:59 UTC
Message-ID
<4eb22ffc-77a1-4cd7-2277-bdc57d31186b@protonmail.com>

Hi Everyone, hoping you might have a solution for this problem:

CONTEXT
  * I'm serving git repos using "smart https" via 
apache and basic authentication; everything works 
fine.
  * We're moving to SSO via Azure AD and apache 
mod_auth_openidc; this works fine for gitweb (on 
the same server as git).
PROBLEM

When trying to clone a repo with the OIDC setup, git breaks on the redirect for user authentication with the following error message (replaced server ids etc with xxx):

     C:\Users\void>git clone --progress -v 
"https://git.xxx.xxx/WebApps.git"
     Cloning into 'WebApps'...
     fatal: unable to update url base from 
redirection:
       asked for: 
https://git.xxx.xxx/WebApps.git/info/refs?service=git-upload-pack
        redirect: 
https://login.microsoftonline.com/xxx/oauth2/authorize?response_type=code&scope=openid&client_id=xxx&state=xxx&redirect_uri=https%3A%2F%2Fgit.xxx.xxx%2Fredirect&nonce=xxx

Can the git client just not handle a web based redirect for login, or is this a configuration issue? Any ideas would be greatly appreciated. Thanks!

Ralph
Next: brian m. carlson
Message 1 of 8 in “git smart http + apache mod_auth_openidc”
  1. Ralph EwigOct 15, 2019
  2. brian m. carlsonOct 16, 2019
  3. Ralph EwigOct 17, 2019
  4. Jeff KingOct 17, 2019
  5. Ralph EwigOct 17, 2019
  6. Ralph EwigOct 17, 2019
  7. brian m. carlsonOct 17, 2019
  8. Ralph EwigOct 18, 2019

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.