"cf login " interactive password prompt fails on cygwin

Question

"cf login " interactive password prompt fails on cygwin

gberche-orange opened this issue 10 years ago · comments

password should be interactively prompted for when -p is omitted, regardless of whether -u was specified.

At least, it should be more user-friendly to remind users that if they prefer interactive login (to avoid having password recorded in their shell history) then they should omit both password and login, otherwise the password won't be prompted and auth will fail:

$ cf login -a https://api.run.pivotal.io -u user@domain.com -o myorg
API endpoint: https://api.run.pivotal.io
Authenticating...
Credentials were rejected, please try again.
Authenticating...
Credentials were rejected, please try again.
Authenticating...
Credentials were rejected, please try again.
FAILED
Unable to authenticate.

API endpoint: https://api.run.pivotal.io (API version: 2.4.0)
Not logged in. Use 'cf.exe login' to log in.

$ cf --version
C:\Program Files (x86)\CloudFoundry\cf.exe version 6.1.2-6a013ca

WangHao commented 9 years ago

+1

dhudici commented 9 years ago

+1

Bigred commented 8 years ago

+1

jeremyrobertson commented 8 years ago

+1

Housseini Maiga commented 7 years ago

+1

Tim Jarratt · Answer 1 · Thu May 15 2014 23:07:54 GMT+0800 (China Standard Time)

Hey Guillaume,

What you're describing sounds like a real bug I saw a few weeks ago on windows. Could you provide a little more information? Are you using cmd.exe, powershell or Cygwin?

Sent From A Very Small Keyboard

On May 15, 2014, at 8:03, Guillaume Berche notifications@github.com wrote:

password should be interactively prompted for when -p is omitted, regardless of whether -u was specified.

At least, it should be more user-friendly to remind users that if they prefer interactive login (to avoid having password recorded in their shell history) then they should omit both password and login, otherwise the password won't be prompted and auth will fail:

$ cf login -a https://api.run.pivotal.io -u user@domain.com -o myorg
API endpoint: https://api.run.pivotal.io
Authenticating...
Credentials were rejected, please try again.
Authenticating...
Credentials were rejected, please try again.
Authenticating...
Credentials were rejected, please try again.
FAILED
Unable to authenticate.

API endpoint: https://api.run.pivotal.io (API version: 2.4.0)
Not logged in. Use 'cf.exe login' to log in.

$ cf --version
C:\Program Files (x86)\CloudFoundry\cf.exe version 6.1.2-6a013ca
—
Reply to this email directly or view it on GitHub.

Guillaume Berche · Answer 2 · Thu May 15 2014 23:18:37 GMT+0800 (China Standard Time)

You're right, it works properly with cmd.exe but fails within cygwin even if -u is not specified

$ cf login -a https://api.run.pivotal.io -o myorg
API endpoint: https://api.run.pivotal.io

Email> user@domain.com 
Authenticating...
Credentials were rejected, please try again.
Authenticating...
Credentials were rejected, please try again.
Authenticating...
Credentials were rejected, please try again.
FAILED
Unable to authenticate.

API endpoint: https://api.run.pivotal.io (API version: 2.4.0)
Not logged in. Use 'cf.exe login' to log in.

I'm using cygin on win7

$ cygcheck.exe -V
cygcheck (cygwin) 1.7.27
System Checker for Cygwin
Copyright (C) 1998 - 2013 Red Hat, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

I can send you privately the output of $ cygcheck.exe -s with full diags if this may help.

$ cygcheck.exe -s

Cygwin Configuration Diagnostics
Current System Time: Thu May 15 16:15:02 2014

Windows 7 Enterprise Ver 6.1 Build 7601 Service Pack 1
[...]

Tim Jarratt · Answer 3 · Fri May 16 2014 07:22:14 GMT+0800 (China Standard Time)

Thanks for confirming. I don't know when this will be fixed, but it is a known bug.

For what it's worth, our supported clients on windows are powershell and cmd.exe

You can also use the 'cf auth' command to authenticate non-interactively.

Sent From A Very Small Keyboard

On May 15, 2014, at 8:18, Guillaume Berche notifications@github.com wrote:

You're right, it works properly with cmd.exe but fails within cygwin even if -u is not specified

$ cf login -a https://api.run.pivotal.io -o myorg
API endpoint: https://api.run.pivotal.io

Email> user@domain.com
Authenticating...
Credentials were rejected, please try again.
Authenticating...
Credentials were rejected, please try again.
Authenticating...
Credentials were rejected, please try again.
FAILED
Unable to authenticate.

API endpoint: https://api.run.pivotal.io (API version: 2.4.0)
Not logged in. Use 'cf.exe login' to log in.
I'm using cygin on win7

$ cygcheck.exe -V
cygcheck (cygwin) 1.7.27
System Checker for Cygwin
Copyright (C) 1998 - 2013 Red Hat, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
I can send you privately the output of $ cygcheck.exe -s with full diags if this may help.

$ cygcheck.exe -s

Cygwin Configuration Diagnostics
Current System Time: Thu May 15 16:15:02 2014

Windows 7 Enterprise Ver 6.1 Build 7601 Service Pack 1
[...]
—
Reply to this email directly or view it on GitHub.

Madhura Bhave · Answer 4 · Sat May 17 2014 02:58:29 GMT+0800 (China Standard Time)

@gberche-orange @tjarratt We are closing this issue for now because Cygwin is not supported currently. There is a story in the CLI tracker project for this feature which can be found here.

Thanks,
CF Community Pair (@mbhave, @stupakov)

Tim Jarratt · Answer 5 · Sat Jun 21 2014 08:22:13 GMT+0800 (China Standard Time)

Also it seems that cygwin is not currently a supported environment for Windows. A little surprising, but makes it easier to explain why this doesn't work.

Rob Dimsdale-Zucker · Answer 6 · Mon Dec 08 2014 03:59:27 GMT+0800 (China Standard Time)

+1 on this issue. Is cywgin still unsupported? Also, the tracker link is broken - was the story deleted?

Tor E Hagemann · Answer 7 · Fri Jan 16 2015 00:18:10 GMT+0800 (China Standard Time)

Another +1 here. As for the story, after sign-up, I get: "You are not allowed to view the requested page."

dr.max · Answer 8 · Wed Apr 22 2015 02:49:23 GMT+0800 (China Standard Time)

-1 for cygwin or windows...

I kid, I kid, of course. We <3 our Windows users. Cheers.

Guillaume Berche · Answer 9 · Wed Apr 22 2015 18:58:26 GMT+0800 (China Standard Time)

For windows users, a bash shell with productive features (searching in the history, clipboard cut/paste, completion on file path, alias to set CF_HOME to switch among CF instances...), makes a real difference in term of productivity when using the CF CLI.

I currently work around this issue using cf auth login pwd instead of cf login.

Michael Lihs · Answer 10 · Wed Mar 09 2016 02:16:11 GMT+0800 (China Standard Time)

+1 for implementing Cygwin support or at least providing a workaround with the current "bug"

qhung · Answer 11 · Tue Mar 22 2016 09:13:25 GMT+0800 (China Standard Time)

+1 for Cygwin ;)

Piyush Gupta · Answer 12 · Fri May 06 2016 03:09:12 GMT+0800 (China Standard Time)

it is the issue with cygwin. can't login

wroe · Answer 13 · Sun May 15 2016 05:10:14 GMT+0800 (China Standard Time)

another +1 for cygwin ( Git Bash actually )

Dies Koper · Answer 14 · Tue Jun 21 2016 10:36:46 GMT+0800 (China Standard Time)

Thanks everbody for speaking up!

I have created an exploratory story to find out what's involved (link to the story is in the next comment).

We currently do platform specific stuff to make the interactivity work, and the team's initial concern was that golang may not support what we need to implement this. This will be investigated as part of this story.

Cheers,
Dies Koper
CF CLI PM

cf-gitbot · Answer 15 · Tue Jun 21 2016 10:36:48 GMT+0800 (China Standard Time)

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/121914309

The labels on this github issue will be updated when the story is started.

Dies Koper · Answer 16 · Tue Jul 19 2016 12:36:52 GMT+0800 (China Standard Time)

FYI, having spent a day or so investigating, the team has found no way to make this work on Windows.

It seems the required APIs are not available to us in Golang.
We'll try one more experiment (calling the Unix APIs - not sure how that will go in cygwin) just to show how desperately we'd want this to work.
If that fails, we may explore a way to at least fail with a better message instead of the loop we see now.

In the meantime, if you have any other suggestions, or can provide us with Golang sample code to make it work, we'd love to take a look!

Dies Koper · Answer 17 · Tue Jul 19 2016 16:27:15 GMT+0800 (China Standard Time)

PS: the issue seems to be the same as golang/go#13088.

ajayroy2006 · Answer 18 · Thu Jul 28 2016 18:26:24 GMT+0800 (China Standard Time)

I was facing the same issue, fixed it by setting proxies , by running following command on windows
SET HTTP_PROXY=http://proxy.yourorganisation.com:port
SET HTTPS_PROXY=https://proxy.yourorganisation.com:port

Dies Koper · Answer 19 · Sun Aug 07 2016 18:27:09 GMT+0800 (China Standard Time)

I have recorded this as a known issue. Closing as a won't fix while we wait for golang to support the APIs/behaviour we need.

Michael Lihs · Answer 20 · Mon Aug 08 2016 19:19:32 GMT+0800 (China Standard Time)

@dkoper thx for your updates!

Hans-Joachim Kliemeck · Answer 21 · Fri Dec 09 2016 05:58:05 GMT+0800 (China Standard Time)

it seems that golang/go#13104 was solved, will there be an update?

Hans-Joachim Kliemeck · Answer 22 · Fri Dec 09 2016 06:07:42 GMT+0800 (China Standard Time)

@dkoper what do you mean with "or option -f to suppress the prompts." on https://github.com/cloudfoundry/cli#known-issues

Dies Koper · Answer 23 · Thu Jan 05 2017 19:43:21 GMT+0800 (China Standard Time)

@h0nIg We're still waiting for Golang to add support for this (see the golang issue I linked to, to which you also added a comment).

The option -f to suppress the prompts referred to prompts in delete commands. But I just verified they work fine, so maybe that was a mistake. I have updated the known issue entry.
PS: Comments on closed issues are hard to track with our tooling - I just found your comments by co-incidence. Better raise a new issue, re-open or ask on Slack or the CF Dev mailing list.

Cheers,
Dies Koper
CF CLI PM

Jon Price · Answer 24 · Wed Mar 08 2017 06:31:48 GMT+0800 (China Standard Time)

I haven't tested this in Cygwin specifically, but the same symptoms exists when using the cli from within a git bash shell on Windows. Adding the following alias to your .bashrc file seems to work:

alias cf='winpty cf'

or just run this from your shell: echo alias cf="'winpty cf'" >> ~/.bashrc

I hope this helps.

Daniel McCrady · Answer 25 · Wed May 17 2017 09:15:43 GMT+0800 (China Standard Time)

I ran into an issue while using Babun. It doesn't seem to install winpty by default so the alias cf="'winpty cf'" >> ~/.bashrc doesn't work.

I installed https://github.com/tiangolo/babun-docker that tries to fix the same problem for docker and babun. Babun also uses zsh by default so running

echo alias cf="'winpty cf'" >> ~/.zshrc

is more appropriate

Saipriya Thirvakadu · Answer 26 · Tue Jun 06 2017 03:58:31 GMT+0800 (China Standard Time)

I was also facing the same issue. But I tried using in the command prompt, it works well.

cziaul · Answer 27 · Mon Jun 19 2017 03:58:52 GMT+0800 (China Standard Time)

Also facing the same issue with git. Then as per above suggestion, I tried using cmd but getting below:

Password>
Authenticating...
Credentials were rejected, please try again.

API endpoint: https://api.local.pcfdev.io (API version: 2.75.0)
Not logged in. Use 'cf login' to log in.
FAILED
Unable to authenticate.

As you can see api.local.pcfdev.io. I have local VM, which password I should use? any default password?

cziaul · Answer 28 · Mon Jun 19 2017 04:10:05 GMT+0800 (China Standard Time)

Just found out local default username and password

$ cf login -a https://api.local.pcfdev.io --skip-ssl-validation
Email: user
Password: pass

aarunrohit · Answer 29 · Mon Sep 11 2017 09:03:40 GMT+0800 (China Standard Time)

Hi All,

Please follow these instructions.

Use the below command to verify your credentials.
cf login -a https://api.example.com -u username@example.com -p Password
2.
use login -a $url -u xxx@abc.com -p xxxxx instead of cf login -a $url command if you are using this in a script.

Thanks,
Arun

jeemis23 · Answer 30 · Wed Sep 13 2017 13:42:38 GMT+0800 (China Standard Time)

@Arun
use ** cf login -a $url -u xxx@abc.com -p xxxxx** instead of cf login -a $url command, works for me

Dies Koper · Answer 31 · Mon Nov 27 2017 14:15:38 GMT+0800 (China Standard Time)

FWIW, cf login on my Cygwin bash seems to work fine now.

While installing the latest Git on Windows, I noticed in its release notes:

Some console programs, most notably non-MSYS2 Python, PHP, Node and OpenSSL, interact correctly with MinTTY only when called through winpty (e.g. the Python console needs to be started as winpty python instead of just python).

So @jmprice's suggestion seems to be their recommended work around.

Brian Koontz · Answer 32 · Fri Feb 23 2018 02:44:31 GMT+0800 (China Standard Time)

Running under the cygwin TERM allows for interactive prompts to work. C:\cygwin64\Cygwin.bat will do this. And you still get bash.

Logan Mzz · Answer 33 · Wed Aug 22 2018 15:58:24 GMT+0800 (China Standard Time)

For Windows GitBash users, it works when using bash.exe (located under bin/ subdirectory of Git installation directory). Which is useful if you're using integrated terminals from an IDE (e.g. VS Code)

Paul Verest · Answer 34 · Fri May 10 2019 17:18:27 GMT+0800 (China Standard Time)

Yes, indeed. It works if when launching Git Bash as "C:\Program Files\Git\bin\bash.exe"

@loganmzz if it works under some flavor of Git Bash, than it is not issue of go referenced here as golang/go#13088, but issue of configuring Git Bash or some Git Bash default settings...

ksndrsllvn · Answer 35 · Mon Jun 10 2019 22:36:47 GMT+0800 (China Standard Time)

This was a little tricky to find. Hopefully anyone having this issue that wants to just be able to git bash finds this comment from March 2017:

I haven't tested this in Cygwin specifically, but the same symptoms exists when using the cli from within a git bash shell on Windows. Adding the following alias to your .bashrc file seems to work:

alias cf='winpty cf'

or just run this from your shell: echo alias cf="'winpty cf'" >> ~/.bashrc

I hope this helps.

(This is what I posted in my group's chat:
2) git bash will not work unless you go through some hoops (you can put your password in plain text on the same line with the -p flag (which is generally a BAD IDEA), use git cmd, run git bash from Git/bin, you can sign in under another service and go back to using git bash, OR you can actually fix the problem by setting an alias in your Git/etc/bash.bashrc with "alias cf='winpty cf'" according to a comment in the bottom of this cf issue page: )