NTLM over HTTPS Does not work

SebastianThorn commented 2 years ago

Hi,

We are using "Microsoft DevOps Server 2020" on prem, this product uses NTML.

When trying to sync/update a project in awx, i get an error with auth, I'v looked into the issue and is seems like a newer curl has to be present when compiling git(?)

I was not able to add a new version of curl or git into awx-ee, but I'v done the following tests:

export DUN=p-dos-itp-service
export DPW=password_password

Works

docker run -it --rm alpine:3.12 sh -c "apk update > /dev/null && apk add git > /dev/null ;git ls-remote https://$DUN:$DPW@dos.corp.se/corp/IT-Plattform/_git/compose-validator -h refs/heads/main"

babe35c5a89cbf894722ba289524044c4474852e        refs/heads/main

Does not work

docker run -it --rm quay.io/ansible/awx-ee sh -c "git ls-remote https://$DUN:$DPW@dos.corp.se/corp/IT-Plattform/_git/compose-validator -h refs/heads/main"

fatal: Authentication failed for 'https://dos.corp.se/corp/IT-Plattform/_git/compose-validator/'

Does work, when only adding username to command and having to enter password in prompt

docker run -it --rm quay.io/ansible/awx-ee sh -c "git ls-remote https://$DUN@dos.corp.se/corp/IT-Plattform/_git/compose-validator -h refs/heads/main"
Password for 'https://p-dos-itp-service@dos.corp.se':

babe35c5a89cbf894722ba289524044c4474852e        refs/heads/main

Is it possible to get new versions of git/curl, or might there be another problem?

Br Sebastian

relrod commented 1 year ago

@SebastianThorn Can you see if this is still an issue with the latest tag? We've just updated it to be CentOS Stream 9 which likely has a newer git version.

SebastianThorn commented 1 year ago

Hi, this was some time ago and I don't remember what I needed it for, but I just ran the example code, and I still get the same results.

$ docker run -it --rm alpine:3.12 sh -c "apk update > /dev/null && apk add git > /dev/null ;git ls-remote https://$DUN:$DPW@dos.corp.se/corp/IT-Plattform/_git/compose-validator -h refs/heads/main"
cad19e6e57a718a5ac6df21c0f787e2fd32c3754        refs/heads/main

$ docker run -it --rm quay.io/ansible/awx-ee sh -c "git ls-remote https://$DUN:$DPW@dos.corp.se/corp/IT-Plattform/_git/compose-validator -h refs/heads/main"
Unable to find image 'quay.io/ansible/awx-ee:latest' locally
latest: Pulling from ansible/awx-ee
4a19f21e8d20: Pull complete
dc8d134f6ea3: Pull complete
07ee105063c7: Pull complete
2f24c75a5264: Pull complete
10f01cf0e1fc: Pull complete
8363e58c36c3: Pull complete
a0dc8fa40152: Pull complete
3f33e0729c5e: Pull complete
3b1c9d6975fe: Pull complete
5a897f6d3db0: Pull complete
4f4fb700ef54: Pull complete
5c516bd4090b: Pull complete
538c42eefe46: Pull complete
1b6abf45946e: Pull complete
b7aa29786c29: Pull complete
Digest: sha256:2367bcd1b3d9759667a37cbd74e5f102d1e9f1490d9abd180b1a9b557d8a46d8
Status: Downloaded newer image for quay.io/ansible/awx-ee:latest
fatal: Authentication failed for 'https://dos.corp.se/corp/IT-Plattform/_git/compose-validator/'

$ docker images
REPOSITORY                                                                                 TAG       IMAGE ID       CREATED         SIZE
quay.io/ansible/awx-ee                                                                     latest    e8d8cf0b0d02   9 hours ago     1.46GB

ansible / awx-ee