[On Premises, Docker] Git server has issues with authentication

Hey,
I recently installed and configured jetbrains space on premises with success.
But no one is able to clone or connect with the git server, not with IntelliJ not with just git and not while trying to connect to the site alone

The service throws an AuthenticationException about 200 times


[2023-05-23 21:04:07,516]   WARN [spatch thread 8] -6c5e-5534                              cs.server.git.http.HttpHosting - Cannot authenticate git HTTP call for given credentials
jetbrains.vcs.server.auth.AuthenticationException: Failed to complete auth request for Token(eyJ...g-g)
        at jetbrains.vcs.server.auth.circlet.CircletAuthHttpConnector.call(CircletAuthProvider.kt:62)
        at jetbrains.vcs.server.auth.circlet.CircletAuthHttpConnector.access$call(CircletAuthProvider.kt:144)
        at jetbrains.vcs.server.auth.circlet.CircletAuthHttpConnector$call$1.invokeSuspend(CircletAuthProvider.kt)
        at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:33)
        at kotlinx.coroutines.DispatchedTask.run(DispatchedTask.kt:104)
        at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:539)
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
        at java.base/java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:304)
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
        at java.base/java.lang.Thread.run(Thread.java:833)
Caused by: java.lang.Error: Failed to complete http call to http://192.168.178.55:8080/~vcs-load-permissions, requestId http-6c5e-5534, connectionId null: Request timeout has expired [url=http://192.168.178.55:8080/~vcs-load-permissions, request_timeout=30000 ms]
        at jetbrains.vcs.server.web.HttpExecutor.call(HttpExecutor.kt:21)
        at jetbrains.vcs.server.web.HttpExecutor$call$1.invokeSuspend(HttpExecutor.kt)
        ... 8 common frames omitted
Caused by: io.ktor.client.plugins.HttpRequestTimeoutException: Request timeout has expired [url=http://192.168.178.55:8080/~vcs-load-permissions, request_timeout=30000 ms]
        at io.ktor.client.plugins.HttpTimeout$Plugin$install$1$1$killer$1.invokeSuspend(HttpTimeout.kt:162)
        at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:33)
        at kotlinx.coroutines.DispatchedTask.run(DispatchedTask.kt:106)
        at kotlinx.coroutines.internal.LimitedDispatcher.run(LimitedDispatcher.kt:42)
        at kotlinx.coroutines.scheduling.TaskImpl.run(Tasks.kt:95)
        at kotlinx.coroutines.scheduling.CoroutineScheduler.runSafely(CoroutineScheduler.kt:570)
        at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.executeTask(CoroutineScheduler.kt:750)
        at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.runWorker(CoroutineScheduler.kt:677)
        at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.run(CoroutineScheduler.kt:664)

But before that, the console prints this a lot


[2023-05-23 21:03:36,947]   INFO [spatch thread 7] -6c5e-5016                              cs.server.git.http.HttpHosting - Received git/HTTP request: /~vcs-load-permissions,

This is the whole log after someone tries to connect to the git server
https://gist.github.com/SirEndii/6bb4c5733c45067929d11dca76f4440a


0
4 comments
According to the logs, it seems that http://192.168.178.55:8080 is not accessible. Could you please clarify what changes did you apply to the configuration of the installation?
0

http://192.168.178.55:8080 seems to be available in my network, I can access it without issues.
https://git.intelligence-modding.de is also available



Could you please clarify what changes did you apply to the configuration of the installation?

I changed only the urls, but here is the upper part of my vcs configuration:
https://gist.github.com/SirEndii/0308ea22f56970c1a3f0dc7f5d3cc7f5


I also have set the url of the vcs configuration part in the space configuration to "https://git.intelligence-modding.de/"

0
Thanks for sharing the config files. Here's what should be changed there:

- `circlet.url.int=http://space:8084` — is the internal URL to the Space service (not VCS). As Docker uses service names to communicate between the containers internally, this parameter should be untouched.
- `circlet.url.ext=http://localhost:8084` — is the external URL to the Space service. I'm not sure, what name is used in your case, but it should be something like `https://space.intelligence-modding.de`.

Please also make sure that all internal URL parameters in the other configs use a `service_names:port` scheme. Refer to the following guide for more information: https://www.jetbrains.com/help/space/docker-compose-installation.html#make-space-on-premises-instance-network-accessible
1

Oh thank you, I somehow missed that these urls are for space. 
Everything works now as expected!

0

Please sign in to leave a comment.