Eclipse Community Forums: EGit / JGit » Git-upload-pack not permitted on Github

Home » Eclipse Projects » EGit / JGit » Git-upload-pack not permitted on Github

Git-upload-pack not permitted on Github [message #1843690]

Fri, 13 August 2021 19:34

Eclipse User

Hi,

I have been using successfully Eclipse/Egit for several weeks now publishing on Github and tonight I am facing this message when I am trying to push:

"Fetching remote refs from https://github.com/xxxxx"
"git-upload-pack not permitted".

I am using HTTPS configuration in GIT.
I tried several solutions found in the forums:

- sslVerify = false
- Changing http client from apache to Java Built In

In the error log I have this line:
Plug-in 'org.eclipse.egit.ui' contributed an invalid Menu Extension (Path: 'org.eclipse.search.menu' is invalid): org.eclipse.egit.ui.actions.OpenCommitSearchPage

ECLIPSE 2021-03
JAVA 16.0.1
Windows 10
EGIT 5.11.1

Can you help me ?

Thanks

Alex

Re: Git-upload-pack not permitted on Github [message #1843694 is a reply to message #1843690]

Sat, 14 August 2021 02:00

Eclipse User

For me I have the same problem trying to do a pull today. It worked two days ago but no longer works now (with the same version of EGit/JGit as before):

https://merks@github.com/<repo>.git: git-upload-pack not permitted on 'https://merks@github.com/<repo>.git/'

But I recall getting emails over the past year says that https support was being phased out.

But I was not able to get ssh to work for this repo when I started with this customer and they told me everyone else was using https...

Re: Git-upload-pack not permitted on Github [message #1843695 is a reply to message #1843694]

Sat, 14 August 2021 02:12

Eclipse User

When I use I, git@github.com:<repo>.git get the the error:

Invalid remote: origin
Invalid remote: origin
Invalid remote: origin

So I have no idea why ssh doesn't work for this repo because for my own private repo it does work.

In any case, I would suggest trying ssh instead...

Re: Git-upload-pack not permitted on Github [message #1843696 is a reply to message #1843695]

Sat, 14 August 2021 02:46

Eclipse User

I did some more digging and tried cloning from the command line:

git clone git@github.com:<repo>.git
Cloning into '<repo>'...
Warning: Permanently added the RSA host key for IP address '140.82.121.3' to the list of known hosts.
ERROR: Sorry, but @<Org> has blocked access to SSH keys created by some
third-party applications. Your key was created before GitHub tracked
keys created by applications, so we need your help.

If you personally created this key, you can approve it at:

  https://github.com/settings/ssh/audit/<number>/policy

Otherwise, please upload a new key:

  https://github.com/settings/keys

Fingerprint:
SHA256:...

[EPOLICYKEYAGE]

fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

So I did the "Approve" thing from the link it provided me and now ssh works for this customer private repo too.

So as I said originally, I think https was being deprecated and phased out... Didn't you get emails like this:

Hi @merks,

You recently used a password to access the repository at <repo> with git using JGit/5.10.0.202012080955-r.

Basic authentication using a password to Git is deprecated and will soon no longer work. Visit https://github.blog/2020-12-15-token-authentication-requirements-for-git-operations/ for more information around suggested workarounds and removal dates.

Thanks,
The GitHub Team

Re: Git-upload-pack not permitted on Github [message #1843699 is a reply to message #1843696]

Sat, 14 August 2021 06:18

Eclipse User

Solved !

As for yesterday Friday Aug 13 GitHub needs Personal Access Token for operating.
It no longer allows HTTPS user/pwd authentication.
I had to generate a PAT and set up two factor authentication in GitHub.
Then I had to delete the secure storage in Eclipse, and specify a new remote location using the generated PAT.
Now it works fine.

Re: Git-upload-pack not permitted on Github [message #1843784 is a reply to message #1843699]

Wed, 18 August 2021 07:16

Eclipse User

Hi,
I'm facing the same issue.
I'm using JGit 5.12.0.202106070339-r with Java 8. I'm trying to construct a FetchCommand, passing the remote (it has the PAT URL format like https://<token>@github.com/<user>/<repo>) and passing a CredentialsProvider which is a UsernamePasswordCredentialsProvider (and other stuff like ref spec to know what to fetch). I've tried to instantiate it with username=username, password=PAT but it did not work.

Do you guys have any idea how to solve this?

Re: Git-upload-pack not permitted on Github [message #1843807 is a reply to message #1843784]

Thu, 19 August 2021 04:38

Eclipse User

I know that basic authentication with an access token works in general because I've tested it with Oomph accessing a setup file. I.e., this works

 https://merks:$token@raw.githubusercontent.com/merks/macromodeling/master/setups/macromodeling.setup

This works to clone from the command line:

git clone https://merks:$token@github.com/merks/macromodeling.git

In the IDE, if I use https://github.com/merks/macromodeling.git and enter merks and the PAT in the dialog, saving to secure storage, it works. So it must be possible in principle for you to make this work if you do it correctly...

Re: Git-upload-pack not permitted on Github [message #1848076 is a reply to message #1843807]

Fri, 19 November 2021 02:29

Eclipse User

Thanks for your information.

Re: Git-upload-pack not permitted on Github [message #1848415 is a reply to message #1848076]

Wed, 01 December 2021 09:54

Eclipse User

AFAIK github discontinued support for basic authentication using your github username and github password.
Instead use your github username and a personal access token.
I'd say that's technically still basic authentication.

Re: Git-upload-pack not permitted on Github [message #1857509 is a reply to message #1843807]

Sat, 11 February 2023 15:46

Eclipse User

Hi Ed, can I ask if there's a way to input the PAT as a variable of type PASSWORD, and then use it in the Remote URI of the clone task?

At the moment I can only seem to do it if the PAT is a clear text variable (the encrypted PAT has slashes in it etc), which isn't ideal for security reasons etc.

(For this particular scenario, SSH isn't an option)

Re: Git-upload-pack not permitted on Github [message #1857515 is a reply to message #1857509]

Sun, 12 February 2023 02:29

Eclipse User

You're trying to encode it in the URI which suggest it's going to be visible if you look at the clone's URI later which also seems not ideal for the same security reasons.

I just let Git prompt me for the password and then let it save the password in secure storage:

index.php/fa/42914/0/

Why not just use that approach?

Attachment: GitSecureStorage.png
(Size: 20.79KB, Downloaded 10485 times)

Re: Git-upload-pack not permitted on Github [message #1857516 is a reply to message #1857515]

Sun, 12 February 2023 07:14

Eclipse User

Thanks for responding Ed...ah, great idea!

I additionally tried entering the creds into secure storage as a Preference task before the clone. It picks them up, problem solved!

Previous Topic:	CVE-2022-41903, and CVE-2022-23521
Next Topic:	git compare shows "no changes in git"

Goto Forum:

-=] Back to Top [=-

Current Time: Sat May 17 02:01:21 EDT 2025

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter