search cancel

Authorization failure when using Git Bash CLI

book

Article ID: 239247

calendar_today

Updated On:

Products

Web Security Service - WSS CASB Gateway CASB Gateway Advanced

Issue/Introduction

Users are using Git Bash CLI to access github.com repository. After running a command in the command line tool, it prompts in the user to authenticate in the browser via OAuth. 

After successfully authenticating in the browser, it appears that the CLI does not receive the authorization and prompts again manually for username and password. 

fatal: Authentication failed for 'https://github.com/<repository>/<directory>

 

 

Cause

When the connection is going through WSS Proxy or Proxy Forwarding, the authorization headers are not being forwarded to the OCS github.com which leads to authorization failure.

This is because the Proxy SG OS does not forward the authorization headers by default.

 

Environment

WSS

Proxy SG OS

Resolution

The following CPL instructs the Proxy to forward the authorization header.

authenticate.forward_credentials(yes)

TechDocs - authenticate.forward_credentials()

 

Within a UPE deployment you can implement the policy yourself. If your policy source is the WSS portal, a support ticket would need to be raised.