From: Ralph Ewig <ralph.phd@protonmail.com>
Date: Tue, 15 Oct 2019 15:59:03 GMT
Subject: git smart http + apache mod_auth_openidc
Message-ID: <4eb22ffc-77a1-4cd7-2277-bdc57d31186b@protonmail.com>

Hi Everyone, hoping you might have a solution for 
this problem:

CONTEXT

  * I'm serving git repos using "smart https" via 
apache and basic authentication; everything works 
fine.
  * We're moving to SSO via Azure AD and apache 
mod_auth_openidc; this works fine for gitweb (on 
the same server as git).

PROBLEM

When trying to clone a repo with the OIDC setup, 
git breaks on the redirect for user authentication 
with the following error message (replaced server 
ids etc with xxx):

     C:\Users\void>git clone --progress -v 
"https://git.xxx.xxx/WebApps.git"
     Cloning into 'WebApps'...
     fatal: unable to update url base from 
redirection:
       asked for: 
https://git.xxx.xxx/WebApps.git/info/refs?service=git-upload-pack
        redirect: 
https://login.microsoftonline.com/xxx/oauth2/authorize?response_type=code&scope=openid&client_id=xxx&state=xxx&redirect_uri=https%3A%2F%2Fgit.xxx.xxx%2Fredirect&nonce=xxx


Can the git client just not handle a web based 
redirect for login, or is this a configuration 
issue? Any ideas would be greatly appreciated. Thanks!

Ralph