[jbosstools-issues] [JBoss JIRA] (JBIDE-19971) OSE v2 prompts user to enter kerberos credentials from command line while importing an application

[Andre Dietisheim (JIRA)]

    [ https://issues.jboss.org/browse/JBIDE-19971?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13076357#comment-13076357 ] 

Andre Dietisheim edited comment on JBIDE-19971 at 6/9/15 3:23 PM:
------------------------------------------------------------------

[~mlabuda] I googled and found out that this is a problem in the jsch library that jgit is using. 

It arose in different projects/discussions:
* Ant: https://bz.apache.org/bugzilla/show_bug.cgi?id=53437
* Gradle: https://discuss.gradle.org/t/building-with-java-7-and-keep-getting-kerberos-prompt-for-ssh-authentication-to-our-ivy-repository/2009
* Talend: https://www.talendforge.org/forum/viewtopic.php?pid=159275#p159275
* Stackoverflow: http://stackoverflow.com/questions/29669459/skipping-kerberos-authentication-prompts-with-jsch http://stackoverflow.com/questions/29669459/skipping-kerberos-authentication-prompts-with-jsch

It was apparently experienced first in jsch 0.1.47 and is still present in 0.1.51 that Eclipse Mars is using:
* https://bz.apache.org/bugzilla/show_bug.cgi?id=53437:
{quote}
The issue exists with Jsch 0.1.47 and 0.1.48.
{quote}
* https://www.talendforge.org/forum/viewtopic.php?pid=159275#p159275
{quote}
The jar jsch-0.1.51.jar was in the lib directory.
{quote}

The workaround suggested is to initialize the ssh session telling it to prefer public keys before the interactive prompt:

http://sourceforge.net/p/jsch/mailman/message/29359265/
{code:java}
session.setConfig("PreferredAuthentications", 
                  "publickey,keyboard-interactive,password");
session.connect()
{code}

When we clone we let jgit handle the ssh session, we can thus only fix this via a patch for jgit.




was (Author: adietish):
[~mlabuda] I googled and found out that this is a problem in the jsch library that jgit is using. 

It arose in different projects/discussions:
* Ant: https://bz.apache.org/bugzilla/show_bug.cgi?id=53437
* Gradle: https://discuss.gradle.org/t/building-with-java-7-and-keep-getting-kerberos-prompt-for-ssh-authentication-to-our-ivy-repository/2009
* Talend: https://www.talendforge.org/forum/viewtopic.php?pid=159275#p159275
* Stackoverflow: http://stackoverflow.com/questions/29669459/skipping-kerberos-authentication-prompts-with-jsch http://stackoverflow.com/questions/29669459/skipping-kerberos-authentication-prompts-with-jsch

It was apparently experienced first in jsch 0.1.47 and is still present in 0.1.51 that Eclipse Mars is using:
* https://bz.apache.org/bugzilla/show_bug.cgi?id=53437:
{quote}
The issue exists with Jsch 0.1.47 and 0.1.48.
{quote}
* https://www.talendforge.org/forum/viewtopic.php?pid=159275#p159275
{quote}
The jar jsch-0.1.51.jar was in the lib directory.
{quote}

The workaround suggested is to initialize the ssh session telling it to prefer public keys before the interactive prompt:

http://sourceforge.net/p/jsch/mailman/message/29359265/ :
{code:java}
session.setConfig("PreferredAuthentications", 
                  "publickey,keyboard-interactive,password");
session.connect()
{code}

When we clone we let jgit handle the ssh session, we can thus only fix this via a patch for jgit.



> OSE v2 prompts user to enter kerberos credentials from command line while importing an application
> --------------------------------------------------------------------------------------------------
>
>                 Key: JBIDE-19971
>                 URL: https://issues.jboss.org/browse/JBIDE-19971
>             Project: Tools (JBoss Tools)
>          Issue Type: Bug
>          Components: openshift, upstream
>    Affects Versions: 4.3.0.Beta1
>            Reporter: Marián Labuda
>            Assignee: Max Rydahl Andersen
>            Priority: Blocker
>             Fix For: 4.3.x
>
>         Attachments: authorized.png, creds_prompt.png, jstack.txt
>
>
> Right on the importing a new OpenShift application from OpenShift Enterprise v2 server (used internal ITOS instance) the importing job in IDE is hanging. After exploration I found out that it's caused because there is a prompt to enter credentials from terminal (the same one where I run IDE by running ./jbdevstudio. It is really annoying bcs such prompt is on every import of any application. Even the kerberos ticket has been established, the prompt is there.
> Prompt from CLI looks like:
> Kerberos username [mlabuda]:  
> Kerberos password for mlabuda: 



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)