[On Premises, Docker] Git server has issues with authentication
Hey,
I recently installed and configured jetbrains space on premises with success.
But no one is able to clone or connect with the git server, not with IntelliJ not with just git and not while trying to connect to the site alone
The service throws an AuthenticationException about 200 times
[2023-05-23 21:04:07,516] WARN [spatch thread 8] -6c5e-5534 cs.server.git.http.HttpHosting - Cannot authenticate git HTTP call for given credentials
jetbrains.vcs.server.auth.AuthenticationException: Failed to complete auth request for Token(eyJ...g-g)
at jetbrains.vcs.server.auth.circlet.CircletAuthHttpConnector.call(CircletAuthProvider.kt:62)
at jetbrains.vcs.server.auth.circlet.CircletAuthHttpConnector.access$call(CircletAuthProvider.kt:144)
at jetbrains.vcs.server.auth.circlet.CircletAuthHttpConnector$call$1.invokeSuspend(CircletAuthProvider.kt)
at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:33)
at kotlinx.coroutines.DispatchedTask.run(DispatchedTask.kt:104)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:539)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:304)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
at java.base/java.lang.Thread.run(Thread.java:833)
Caused by: java.lang.Error: Failed to complete http call to http://192.168.178.55:8080/~vcs-load-permissions, requestId http-6c5e-5534, connectionId null: Request timeout has expired [url=http://192.168.178.55:8080/~vcs-load-permissions, request_timeout=30000 ms]
at jetbrains.vcs.server.web.HttpExecutor.call(HttpExecutor.kt:21)
at jetbrains.vcs.server.web.HttpExecutor$call$1.invokeSuspend(HttpExecutor.kt)
... 8 common frames omitted
Caused by: io.ktor.client.plugins.HttpRequestTimeoutException: Request timeout has expired [url=http://192.168.178.55:8080/~vcs-load-permissions, request_timeout=30000 ms]
at io.ktor.client.plugins.HttpTimeout$Plugin$install$1$1$killer$1.invokeSuspend(HttpTimeout.kt:162)
at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:33)
at kotlinx.coroutines.DispatchedTask.run(DispatchedTask.kt:106)
at kotlinx.coroutines.internal.LimitedDispatcher.run(LimitedDispatcher.kt:42)
at kotlinx.coroutines.scheduling.TaskImpl.run(Tasks.kt:95)
at kotlinx.coroutines.scheduling.CoroutineScheduler.runSafely(CoroutineScheduler.kt:570)
at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.executeTask(CoroutineScheduler.kt:750)
at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.runWorker(CoroutineScheduler.kt:677)
at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.run(CoroutineScheduler.kt:664)
But before that, the console prints this a lot
[2023-05-23 21:03:36,947] INFO [spatch thread 7] -6c5e-5016 cs.server.git.http.HttpHosting - Received git/HTTP request: /~vcs-load-permissions,
This is the whole log after someone tries to connect to the git server
https://gist.github.com/SirEndii/6bb4c5733c45067929d11dca76f4440a
Please sign in to leave a comment.
http://192.168.178.55:8080 seems to be available in my network, I can access it without issues.
https://git.intelligence-modding.de is also available
I changed only the urls, but here is the upper part of my vcs configuration:
https://gist.github.com/SirEndii/0308ea22f56970c1a3f0dc7f5d3cc7f5
I also have set the url of the vcs configuration part in the space configuration to "https://git.intelligence-modding.de/"
- `circlet.url.int=http://space:8084` — is the internal URL to the Space service (not VCS). As Docker uses service names to communicate between the containers internally, this parameter should be untouched.
- `circlet.url.ext=http://localhost:8084` — is the external URL to the Space service. I'm not sure, what name is used in your case, but it should be something like `https://space.intelligence-modding.de`.
Please also make sure that all internal URL parameters in the other configs use a `service_names:port` scheme. Refer to the following guide for more information: https://www.jetbrains.com/help/space/docker-compose-installation.html#make-space-on-premises-instance-network-accessible
Oh thank you, I somehow missed that these urls are for space.
Everything works now as expected!