git/list[1] front-page[2] threads[3] people[4] search[5] about
 

credentials are being erased from credential manager via git credential-wincred erase command

From
OKO'Connell, Ken <ken.o'connell@cognex.com>
Date
Apr 13, 2016, 18:49 UTC
Message-ID
<58eced84663c4ef38a63811d3367acf2@USNAEXCP1.pc.cognex.com>
Good afternoon,

My company setup wincred for management of our git/stash user credentials for our automated build scripts. It works great for days, sometimes a couple weeks. Then one day build haven't run and we discover the scripts are randomly found at a user prompt awaiting stash user credentials.

We look at Windows Credential Manager store in Windows and find the Stash user credentials are erased from Credential Manager! 

We discovered via GIT_TRACE, that the command used to retrieve the credentials, is being followed up by a git command to erase the credentials. -not all the time, but seemingly in a random way. Looking at the trace logs on one server, we see the following commands: 'git-remote-https' 'origin' https://stash-server/bla/bla/bla.git 'git-credential-wincred' 'get' 'git credential-wincred erase'

Do you have ideas on how to track down the root cause of why this command is running?  

Info: Windows 7 machines Git version 1.9.5-msysgit, and Git 2.7.4 windows (on one machine to see if upgrading helped) -it did not. Stash version 3.11.2

Please let me know if I can get any more information to help diagnose. Thanks, -Ken

Next: Bryan Turner
Message 1 of 3 in “credentials are being erased from credential manager via git credential-wincred erase command”
  1. O'Connell, KenApr 13, 2016
  2. Bryan TurnerApr 13, 2016
  3. Jeff KingApr 13, 2016

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.