Re: GIT, libcurl and GSS-Negotiate

2014-05-17 Thread Jeff King
On Fri, May 16, 2014 at 10:34:10PM +, brian m. carlson wrote: The tricky part is figuring out when to return HTTP_NOAUTH (do not try again, we failed) versus HTTP_REAUTH (get credentials and try again) in handle_curl_result. Right now the decision is based on did we have a username

Re: GIT, libcurl and GSS-Negotiate

2014-05-16 Thread brian m. carlson
On Mon, May 12, 2014 at 04:21:53PM -0400, Jeff King wrote: On Sat, May 10, 2014 at 09:01:32PM +, brian m. carlson wrote: * Make git understand that it really needs to try again with different credentials in this case (how to do that is unknown). It should be pretty straightforward to

Re: GIT, libcurl and GSS-Negotiate

2014-05-12 Thread Carlos Martín Nieto
On Sat, 2014-05-10 at 21:01 +, brian m. carlson wrote: On Mon, May 05, 2014 at 12:21:33PM +0200, Ivo Bellin Salarin wrote: Well, I'm on Windows. using `git version 1.9.2.msysgit.0`. You can find all the exchanges, recorded with wireshark, of the following usecases: * git vanilla

Re: GIT, libcurl and GSS-Negotiate

2014-05-12 Thread Jeff King
On Sat, May 10, 2014 at 09:01:32PM +, brian m. carlson wrote: What it looks like is happening is that git is offering Negotiate data, and then your server is responding with a 401 Unauthorized. libgit2 (presumably using WinHTTP) continues in this case, retrying with a longer set of

Re: GIT, libcurl and GSS-Negotiate

2014-05-10 Thread brian m. carlson
On Mon, May 05, 2014 at 12:21:33PM +0200, Ivo Bellin Salarin wrote: Well, I'm on Windows. using `git version 1.9.2.msysgit.0`. You can find all the exchanges, recorded with wireshark, of the following usecases: * git vanilla (not working), * VisualStudio2013 with libgit (working) * curl

Re: GIT, libcurl and GSS-Negotiate

2014-05-05 Thread Ivo Bellin Salarin
Well, I'm on Windows. using `git version 1.9.2.msysgit.0`. You can find all the exchanges, recorded with wireshark, of the following usecases: * git vanilla (not working), * VisualStudio2013 with libgit (working) * curl (--ntlm, working) * curl (--negotiate, not working) They're available on

Re: GIT, libcurl and GSS-Negotiate

2014-04-26 Thread brian m. carlson
On Thu, Apr 24, 2014 at 07:17:36PM +0200, Ivo Bellin Salarin wrote: To shortly resume it, the problem is that: * when the authentication method (WWW-Authenticate) is Negotiate AND * when the server proposes a NTLMSSP_CHALLENGE in response of the client's NTLMSSP_NEGOTIATE, = libcurl yields an

GIT, libcurl and GSS-Negotiate

2014-04-24 Thread Ivo Bellin Salarin
Hello, I'm having problems while trying to authenticate against a TFS hosted repository. I experience the same problem in git for windows and in git for linux (both versions are 1.9.2). The problem is described on a [github msysgit/git issue](https://github.com/msysgit/git/issues/171) To