git smart http + apache mod_auth_openidc
- From
- Ralph Ewig <ralph.phd@protonmail.com>
- Date
- Oct 15, 2019, 15:59 UTC
- Message-ID
- <4eb22ffc-77a1-4cd7-2277-bdc57d31186b@protonmail.com>
Hi Everyone, hoping you might have a solution for this problem:
CONTEXT
* I'm serving git repos using "smart https" via apache and basic authentication; everything works fine. * We're moving to SSO via Azure AD and apache mod_auth_openidc; this works fine for gitweb (on the same server as git).
PROBLEM
When trying to clone a repo with the OIDC setup, git breaks on the redirect for user authentication with the following error message (replaced server ids etc with xxx):
C:\Users\void>git clone --progress -v "https://git.xxx.xxx/WebApps.git" Cloning into 'WebApps'... fatal: unable to update url base from redirection: asked for: https://git.xxx.xxx/WebApps.git/info/refs?service=git-upload-pack redirect: https://login.microsoftonline.com/xxx/oauth2/authorize?response_type=code&scope=openid&client_id=xxx&state=xxx&redirect_uri=https%3A%2F%2Fgit.xxx.xxx%2Fredirect&nonce=xxx
Can the git client just not handle a web based redirect for login, or is this a configuration issue? Any ideas would be greatly appreciated. Thanks!
Ralph