git suddenly started putting up a dialog instead of asking for my password on the command line

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
14 messages Options
Reply | Threaded
Open this post in threaded view
|

git suddenly started putting up a dialog instead of asking for my password on the command line

Joel Rees
Git has suddenly started putting up a dialog box to ask for my
credentials instead of asking for my credentials at the command line.

I found the suggestion to set the following git configuration,

    git config --global credential.modalPrompt false

but it doesn't change anything.

Any suggestions what I might have installed, or what update might have
changed this behavior?

--
Joel Rees

http://reiisi.blogspot.jp/p/novels-i-am-writing.html

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: git suddenly started putting up a dialog instead of asking for my password on the command line

Liam Proven
On Tue, 22 Sep 2020 at 16:25, Joel Rees <[hidden email]> wrote:

>
> Git has suddenly started putting up a dialog box to ask for my
> credentials instead of asking for my credentials at the command line.
>
> I found the suggestion to set the following git configuration,
>
>     git config --global credential.modalPrompt false
>
> but it doesn't change anything.
>
> Any suggestions what I might have installed, or what update might have
> changed this behavior?

There are too many variables to say just yet.

Just standalone local Git, or talking to a remote repo such as Github or Gitlab?

If a remote Git host, which one? How did you authenticate to it before?

E.g. in $DAYJOB I usually use Github. I do have password-based login,
but with 2-factor authentication as well (for 1 particular repo).
However from the command line I use ssh to pull and push,
authenticated using GNUPG.
I have created a key and uploaded it to Github so it knows I'm me and
so I never enter any passwords; I unlock the key locally before use. I
used to do this manually with `ssh-add` but now I've added it to my
startup scripts.

--
Liam Proven – Profile: https://about.me/liamproven
Email: [hidden email] – gMail/gTalk/gHangouts: [hidden email]
Twitter/Facebook/LinkedIn/Flickr: lproven – Skype: liamproven
UK: +44 7939-087884 – ČR (+ WhatsApp/Telegram/Signal): +420 702 829 053

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: git suddenly started putting up a dialog instead of asking for my password on the command line

Joel Rees
On Wed, Sep 23, 2020 at 12:39 AM Liam Proven <[hidden email]> wrote:

>
> On Tue, 22 Sep 2020 at 16:25, Joel Rees <[hidden email]> wrote:
> >
> > Git has suddenly started putting up a dialog box to ask for my
> > credentials instead of asking for my credentials at the command line.
> >
> > I found the suggestion to set the following git configuration,
> >
> >     git config --global credential.modalPrompt false
> >
> > but it doesn't change anything.
> >
> > Any suggestions what I might have installed, or what update might have
> > changed this behavior?
>
> There are too many variables to say just yet.

That's why I'm hoping someone has some suggestions.

> Just standalone local Git, or talking to a remote repo such as Github or Gitlab?
>
> If a remote Git host, which one? How did you authenticate to it before?

Git to a repository on the osdn.net servers.
(https://osdn.net/projects/splitstack-runtimelib/)

> E.g. in $DAYJOB I usually use Github. I do have password-based login,

It's been several months since I did a push.

> but with 2-factor authentication as well (for 1 particular repo).

I don't believe in 2 factor.

> However from the command line I use ssh to pull and push,
> authenticated using GNUPG.

I supply the password to my local ssh keystore at the terminal command line
when I do a push to my stuff on osdn.

> I have created a key and uploaded it to Github so it knows I'm me and
> so I never enter any passwords; I unlock the key locally before use. I
> used to do this manually with `ssh-add` but now I've added it to my
> startup scripts.

Hmm. I probably need to check whether OSDN has my public key.
But that hasn't changed in the time since I last did a push.

--
Joel Rees

http://reiisi.blogspot.jp/p/novels-i-am-writing.html

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: git suddenly started putting up a dialog instead of asking for my password on the command line

Liam Proven
On Wed, 23 Sep 2020 at 14:00, Joel Rees <[hidden email]> wrote:
> >
> > There are too many variables to say just yet.
>
> That's why I'm hoping someone has some suggestions.

What I am trying to say is that you have not given us enough
information to make suggestions.

> Git to a repository on the osdn.net servers.
> (https://osdn.net/projects/splitstack-runtimelib/)

OK. So, is you account on OSDN in good shape? No recent criteria
changes? Still has your keys? They are correct and current? You have
not changed them?

> It's been several months since I did a push.

This does not really seem to change anything, except that maybe this
issue is some months old and you just have not noticed...

> > but with 2-factor authentication as well (for 1 particular repo).
>
> I don't believe in 2 factor.

Well, I am sorry to tell you that the crackers don't care whether you
believe in it or not. Most account-compromise attempts now are
automated by software that is not written or understood by the people
using it. It is the modern equivalent of wall-dialling, AKA
war-dialling.

2FA is more or less essential now if you are doing anything remotely important.

https://www.forbes.com/sites/laurashin/2014/11/18/someone-had-taken-over-my-life-an-identity-theft-victims-story/

https://www.csmonitor.com/World/Passcode/2015/0506/What-it-s-like-to-have-your-identity-stolen

https://heimdalsecurity.com/blog/start-using-two-factor-authentication/

I dislike it, but I am gradually turning it on for everything. It is a
pain but a necessary pain.

> I supply the password to my local ssh keystore at the terminal command line
> when I do a push to my stuff on osdn.

Do those locally-stored credentials match the ones on OSDN? Do not
assume; check.

> Hmm. I probably need to check whether OSDN has my public key.
> But that hasn't changed in the time since I last did a push.

How can you be sure?

--
Liam Proven – Profile: https://about.me/liamproven
Email: [hidden email] – gMail/gTalk/gHangouts: [hidden email]
Twitter/Facebook/LinkedIn/Flickr: lproven – Skype: liamproven
UK: +44 7939-087884 – ČR (+ WhatsApp/Telegram/Signal): +420 702 829 053

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: git suddenly started putting up a dialog instead of asking for my password on the command line

Joel Rees
On Wed, Sep 23, 2020 at 9:56 PM Liam Proven <[hidden email]> wrote:
>
> On Wed, 23 Sep 2020 at 14:00, Joel Rees <[hidden email]> wrote:
> > >
> > > There are too many variables to say just yet.
> >
> > That's why I'm hoping someone has some suggestions.
>
> What I am trying to say is that you have not given us enough
> information to make suggestions.

Still trying to figure out what's relevant.

> > Git to a repository on the osdn.net servers.
> > (https://osdn.net/projects/splitstack-runtimelib/)
>
> OK. So, is you account on OSDN in good shape? No recent criteria
> changes? Still has your keys? They are correct and current? You have
> not changed them?

I can log in via their web interface, to do maintenance kinds of
things, and to check
the public key I have given them.

> > It's been several months since I did a push.
>
> This does not really seem to change anything, except that maybe this
> issue is some months old and you just have not noticed...

It's possible. Like I mentioned, my searches did bring up some changes
in the human protocol side of git.
Or perhaps it's gnupg or ssh that is invoking something that gets
shunted out off the command line to
a pop-up modal dialog interface.

Or it might have something to do with some desktop applications I
recently installed. My wife wanted
typing practice software, and insisted on having it NOW (and hasn't
touched it since), so I was
a little silly and installed a bunch of things like

ktouch
klavaro
bam bam
dvorak 7 min
gcompris education
pysio game
TIPP10
tux typing

and I think some of those had dependencies that sucked a wallet or two
in, which is suspicious.

and I then installed geogebra and kalgebra to try to help my daughter
with her art class.
Both of those have grown a little out-of-control, as well.

> > > but with 2-factor authentication as well (for 1 particular repo).
> >
> > I don't believe in 2 factor.
>
> Well, I am sorry to tell you that the crackers don't care whether you
> believe in it or not. Most account-compromise attempts now are
> automated by software that is not written or understood by the people
> using it. It is the modern equivalent of wall-dialling, AKA
> war-dialling.
>
> 2FA is more or less essential now if you are doing anything remotely important.
>
> https://www.forbes.com/sites/laurashin/2014/11/18/someone-had-taken-over-my-life-an-identity-theft-victims-story/

Forbes on security? Not going there.

> https://www.csmonitor.com/World/Passcode/2015/0506/What-it-s-like-to-have-your-identity-stolen
>
> https://heimdalsecurity.com/blog/start-using-two-factor-authentication/
>

Deep sigh. Don't get me distracted.

> I dislike it, but I am gradually turning it on for everything. It is a
> pain but a necessary pain.
>
> > I supply the password to my local ssh keystore at the terminal command line
> > when I do a push to my stuff on osdn.
>
> Do those locally-stored credentials match the ones on OSDN? Do not
> assume; check.

I have now logged in and checked. (I had gotten a visual on it while I
was logged in
a couple of weeks ago, which is why I didn't bother checking before I
posted the question.)

> > Hmm. I probably need to check whether OSDN has my public key.
> > But that hasn't changed in the time since I last did a push.
>
> How can you be sure?

As I say, I have now checked since this occurred.

I'm pretty sure it was something I installed in between the last push and now.

I can possibly get my old debian wheezy workstation booted up and try
some git from that
to see if I get some clues about things changing in the external world.

But I'm more inclined to think it's something on the current Ubuntu
18.04 workstation.

--
Joel Rees

http://reiisi.blogspot.jp/p/novels-i-am-writing.html

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: git suddenly started putting up a dialog instead of asking for my password on the command line

Joel Rees
In reply to this post by Joel Rees
Okay, let's try this question:

Does anyone know whether current (Ubuntu 18.04) versions of ssh, gnupg, or git
have recently taken to putting up a modal dialog box for your
authentication tokens
when invoked by a git push from the command line?

Or, as an option, whether one of the popular wallet apps (kwallet, et.
al.) might
be doing something to insert such a modal dialog into your chain of agents
even when invoked by a git push on the command line?

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: git suddenly started putting up a dialog instead of asking for my password on the command line

Tommy Trussell
On Thu, Sep 24, 2020 at 7:52 AM Joel Rees <[hidden email]> wrote:
Does anyone know whether current (Ubuntu 18.04) versions of ssh, gnupg, or git
have recently taken to putting up a modal dialog box for your
authentication tokens
when invoked by a git push from the command line?

Or, as an option, whether one of the popular wallet apps (kwallet, et.
al.) might
be doing something to insert such a modal dialog into your chain of agents
even when invoked by a git push on the command line?

As far as I know, nothing has changed recently to make this happen more.

I've only seen this a few times, luckily. I sometimes get the modal password dialog on login when I use my laptop's fingerprint reader, and I haven't tried to figure out how to fix it -- I just don't use the fingerprint reader. 

But it seems in general it's a GNOME thing. (Long discussions about it in the bugs linked here.)


It took a bit more digging, but I found a possible solution. Look to see if something has set the GIT_ASKPASS and/or SSH_ASKPASS environment variables, and if so, try unset on them.


Since this is stopping you with git, you might look to see if you have git configured to use a credential.helper 

git config -l 



--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: git suddenly started putting up a dialog instead of asking for my password on the command line

Joel Rees
output of git config -l

On Fri, Sep 25, 2020 at 10:31 AM Tommy Trussell
<[hidden email]> wrote:

>
> On Thu, Sep 24, 2020 at 7:52 AM Joel Rees <[hidden email]> wrote:
>>
>> Does anyone know whether current (Ubuntu 18.04) versions of ssh, gnupg, or git
>> have recently taken to putting up a modal dialog box for your
>> authentication tokens
>> when invoked by a git push from the command line?
>>
>
> git config -l

$ git config -l
core.editor=vim
credential.modalprompt=false
core.repositoryformatversion=0
core.filemode=true
core.bare=false
core.logallrefupdates=true
user.email=me at the mail server
user.name=Joel Matthew Rees
credential.modalprompt=false
remote.origin.url=[hidden email]:/gitroot/splitstack-runtimelib/splitstack-runtimelib.git
remote.origin.fetch=+refs/heads/*:refs/remotes/origin/*
branch.master.remote=origin
branch.master.merge=refs/heads/master


--
Joel Rees

http://reiisi.blogspot.jp/p/novels-i-am-writing.html

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: git suddenly started putting up a dialog instead of asking for my password on the command line

Liam Proven
In reply to this post by Joel Rees
On Thu, 24 Sep 2020 at 14:47, Joel Rees <[hidden email]> wrote:
>
> I can log in via their web interface, to do maintenance kinds of
> things, and to check
> the public key I have given them.

Sounds good.

> and I think some of those had dependencies that sucked a wallet or two
> in, which is suspicious.

Wow! Really? That is an odd dependency. Yes, that might do it. What
desktop are you using?

--
Liam Proven – Profile: https://about.me/liamproven
Email: [hidden email] – gMail/gTalk/gHangouts: [hidden email]
Twitter/Facebook/LinkedIn/Flickr: lproven – Skype: liamproven
UK: +44 7939-087884 – ČR (+ WhatsApp/Telegram/Signal): +420 702 829 053

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: git suddenly started putting up a dialog instead of asking for my password on the command line

Joel Rees
On Fri, Sep 25, 2020 at 9:36 PM Liam Proven <[hidden email]> wrote:

>
> On Thu, 24 Sep 2020 at 14:47, Joel Rees <[hidden email]> wrote:
> >
> > I can log in via their web interface, to do maintenance kinds of
> > things, and to check
> > the public key I have given them.
>
> Sounds good.
>
> > and I think some of those had dependencies that sucked a wallet or two
> > in, which is suspicious.
>
> Wow! Really? That is an odd dependency. Yes, that might do it. What
> desktop are you using?

Whatever the Ubuntu 18 installer gave me by default. I needed to have
it more-or-less the same as my daughter's.

Which means Gnome, I guess.

Unfortunately, I don't remember what I was watching install when I
thought I saw a wallet install.

--
Joel Rees

http://reiisi.blogspot.jp/p/novels-i-am-writing.html

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: git suddenly started putting up a dialog instead of asking for my password on the command line

Joel Rees
In reply to this post by Tommy Trussell
On Fri, Sep 25, 2020 at 10:31 AM Tommy Trussell
<[hidden email]> wrote:

>
> On Thu, Sep 24, 2020 at 7:52 AM Joel Rees <[hidden email]> wrote:
>>
>> Does anyone know whether current (Ubuntu 18.04) versions of ssh, gnupg, or git
>> have recently taken to putting up a modal dialog box for your
>> authentication tokens
>> when invoked by a git push from the command line?
>>
>[...]
>
> As far as I know, nothing has changed recently to make this happen more.
>[...]
> But it seems in general it's a GNOME thing. (Long discussions about it in the bugs linked here.)
>
> https://askubuntu.com/questions/1133198/disable-modal-dialog-to-insert-password
>
> It took a bit more digging, but I found a possible solution. Look to see if something has set the GIT_ASKPASS and/or SSH_ASKPASS environment variables, and if so, try unset on them.
>
> https://stackoverflow.com/questions/21422782/prevent-git-from-popping-up-gnome-password-box
>

echo $GIT_ASKPASS $SSH_ASKPASS

(nothing. Not set.)

[...]

I seem to be too old to chase bugs like these down any more. Keep
falling asleep at the terminal. Tomorrow's an early day delivering
mail again. Physical mail.

Forgive me if I don't follow some protocol here.

--
Joel Rees

http://reiisi.blogspot.jp/p/novels-i-am-writing.html

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: git suddenly started putting up a dialog instead of asking for my password on the command line

Liam Proven
In reply to this post by Joel Rees
On Fri, 25 Sep 2020 at 14:47, Joel Rees <[hidden email]> wrote:
>
> Whatever the Ubuntu 18 installer gave me by default. I needed to have
> it more-or-less the same as my daughter's.
>
> Which means Gnome, I guess.
>
> Unfortunately, I don't remember what I was watching install when I
> thought I saw a wallet install.

OK.

FWIW, in search of an easy life, when I want to go chasing stuff like
this, I just install Synaptic.

sudo apt install synaptic

Then I can search for "wallet" or whatever. This searches descriptions
and so on too, and you can even choose to search by package contents.

Click the first column header to sort by installed status (I think
it's first, but you get the gist).

N.B if you're running GNOME on Wayland by default then apps that need
root, such as Synaptic, won't run. When you log in, pick "GNOME on
X.org" in the settings, then it should work.

--
Liam Proven – Profile: https://about.me/liamproven
Email: [hidden email] – gMail/gTalk/gHangouts: [hidden email]
Twitter/Facebook/LinkedIn/Flickr: lproven – Skype: liamproven
UK: +44 7939-087884 – ČR (+ WhatsApp/Telegram/Signal): +420 702 829 053

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: git suddenly started putting up a dialog instead of asking for my password on the command line

Joel Rees
In reply to this post by Joel Rees
I decided to try to ssh into the osdn.net shell server, and it gives
me the same (modal) popup dialog.

So I'm suspecting ssh-agent, but trying ssh config, and it claims I
already have the config file open.

Ubuntu was claiming my vi was nano (pain in the backside!), and I
tried to fix that, but now it seems that Ubuntu is claiming my vim is
not installed, but

    vi --version

says vi is vim.

I think this is a clear case of too many cooks spoiling the soup.

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
Reply | Threaded
Open this post in threaded view
|

Re: git suddenly started putting up a dialog instead of asking for my password on the command line

Joel Rees
In reply to this post by Joel Rees
On Tue, Sep 22, 2020 at 11:23 PM Joel Rees <[hidden email]> wrote:

>
> Git has suddenly started putting up a dialog box to ask for my
> credentials instead of asking for my credentials at the command line.
>
> I found the suggestion to set the following git configuration,
>
>     git config --global credential.modalPrompt false
>
> but it doesn't change anything.
>
> Any suggestions what I might have installed, or what update might have
> changed this behavior?

And

On Tue, Sep 22, 2020 at 11:23 PM Joel Rees <[hidden email]> wrote:

>
> Git has suddenly started putting up a dialog box to ask for my
> credentials instead of asking for my credentials at the command line.
>
> I found the suggestion to set the following git configuration,
>
>     git config --global credential.modalPrompt false
>
> but it doesn't change anything.
>
> Any suggestions what I might have installed, or what update might have
> changed this behavior?

I finally had the presence of mind to search on the dialog box contents:

    "An application wants to access the private key but it's locked."

Found the following:

    https://superuser.com/questions/1359181/an-application-wants-to-access-the-private-key-but-its-locked-ssh

which talks about gnome-keyring (an unmaintained project?!?!?!) being
plugged into things without permission, and has a link to

    https://wiki.gnome.org/Projects/GnomeKeyring/Ssh

which explains the gnome project's official attitude about gnome-keyring.

Gnome keyring is the culprit. I assume it got plugged into my stuff
when I installed a bunch of keyboard practice apps or some such, along
with the vi alternatives being reverted back to nano (gag).

It explains that you can disable gnome-keyring's ssh-agent for a user by running

     gnome-session-properties

from the command line, and unselecting the "SSH Key Agent" startup
program. (On mine, it was the only thing there.)

I had to log out and back in to get the change to take effect, but it
solved the problem -- for now.

I'm planning on looking into building gnome-keyring with the
--disable-ssh-agent option.

${expletive} deleted.

--
Joel Rees

http://reiisi.blogspot.jp/p/novels-i-am-writing.html

--
ubuntu-users mailing list
[hidden email]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users