Git-credential-manager-for-windows: Not being prompted for credentials since domain pw change (and attempts to fix which may have made it worse)

[lanwench]

Hi - I am still quite new at git in general, so please be gentle...

My company has an enterprise github server on premise. I'm on Win7 & PowerShell5. Some time ago, I had configured my PowerShell ISE profile as per http://mikefrobbins.com/2016/02/09/configuring-the-powershell-ise-for-use-with-git-and-github/. I think I started out with git 2.5.2.2 and the MS GitCredential Manager for Windows v1.0.0.

That worked fine - when I first pushed, I got the popup window and the credentials were stored in my Credential Manager, and I never got prompted again.

After a forced domain password change, pushes began to throw authentication failures, and I am now unable to do anything. I've tried so many things now I truly don't remember if I tried changing the existing stored credential, but after spinning wheels for a while I decided to upgrade everything anyway and start over as it seemed like it would be faster.

I'm now on:

git version 2.11.0.windows.1
git : Git Credential Manager for Windows version 1.8.1

And here's my sanitized config:

core.symlinks=false
core.autocrlf=true
core.fscache=true
color.diff=auto
color.status=auto
color.branch=auto
color.interactive=true
help.format=html
http.sslcainfo=C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt
sendemail.smtpserver=/bin/msmtp.exe
diff.astextplain.textconv=astextplain
rebase.autosquash=true
credential.helper=manager
user.name=Joe Bloggs
[email protected]
filter.lfs.clean=git-lfs clean %f
filter.lfs.smudge=git-lfs smudge %f
filter.lfs.required=true
core.autocrlf=false
credential.modalprompt=true
credential.authority=Windows
credential.helper=manager
gui.recentrepo=C:/Users/jbloggs/foo
core.repositoryformatversion=0
core.filemode=false
core.bare=false
core.logallrefupdates=true
core.symlinks=false
core.ignorecase=true
core.hidedotfiles=dotGitOnly
remote.origin.url=https://enterprise.git.domain.local/foo.git
remote.origin.fetch=+refs/heads/*:refs/remotes/origin/*
branch.master.remote=origin
branch.master.merge=refs/heads/master

When I push, I don't get prompted (true in PS, PSISE, command prompt and Git GUI). I tried manually adding a generic stored credential in Credential Manager (address being entered as git:https://enterprise.git.domain.local) and it still doesn't work.

I get:

remote: Anonymous access to foo.git denied.
fatal: Authentication failed for 'https://enterprise.git.domain.local/foo.git/

I tried launching the github.authentication executable in the installation folder just to see what it looks like, and that worked.

I am happy to rip everything out again and start over if someone can advise me where I'm going wrong!

Thanks....
LW

[whoisj]

Any chance the host server relies on NTLM?

If so, please see: https://github.com/git-for-windows/git/issues/987#issuecomment-265758550 there is a bug with Git for Windows 2.10.2 and 2.11.0 which disables the ability of libcurl to correctly perform Negotiate and therefore NTLM.

The work around is to git config --global http.emptyAuth true.

[lanwench]

Thanks for the reply. I suspect NTLM is true although I'm not sure how to check that.

I made the change but it doesn't seem to help.

remote: Anonymous access to foo.git denied.
fatal: Authentication failed for 'https://enterprise.git.domain.local/foo.git/'

Should I just go back to an earlier version of git and if that works, wait it out until 2.12? My original setup was nicer anyway (I was using the portable version..I just didn't do that this time in the interests of simplification).

Here's my config.
c:\>git config --list

core.symlinks=false
core.autocrlf=true
core.fscache=true
color.diff=auto
color.status=auto
color.branch=auto
color.interactive=true
help.format=html
http.sslcainfo=C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt
sendemail.smtpserver=/bin/msmtp.exe
diff.astextplain.textconv=astextplain
rebase.autosquash=true
credential.helper=manager
user.name=Joe Bloggs
[email protected]
filter.lfs.clean=git-lfs clean %f
filter.lfs.smudge=git-lfs smudge %f
filter.lfs.required=true
core.autocrlf=false
credential.modalprompt=true
credential.authority=Windows
credential.helper=manager
gui.recentrepo=C:/Users/jbloggs/foo
http.emptyauth=true
core.repositoryformatversion=0
core.filemode=false
core.bare=false
core.logallrefupdates=true
core.symlinks=false
core.ignorecase=true
core.hidedotfiles=dotGitOnly
remote.origin.url=https://enterprise.git.domain.local/foo.git
remote.origin.fetch=+refs/heads/*:refs/remotes/origin/*
branch.master.remote=origin
branch.master.merge=refs/heads/master

[whoisj]

Degrading versions to 2.10.1 is likely the correct answer until 2.12.0 is released.

Please let me know if you run into any issues. 😄

[dscho]

Please note that I released v2.11.0(3) today, which should have the fix.

[lanwench]

Gah! No, still no dice ... on one machine. I got this working on my laptop (running Win10) using portable Git 2.11.0.3, with a manual install of the GCMW via .\git-credential-manager.exe install --path C:\Users\jbloggs\Dropbox\Portable\Git and it worked.

On another machine, I cannot for love or money get it to work, although I use the same #$%^& portable version of git (this is the reason I like portable) and manually installed the same version of the credential manager. Got Anonymous access denied, fatal: auth failed. I then removed the portable install folder, and installed the full version of 2.11.0.3, and have the same errors. (That's on Win7).

Should I be prompted with a modal dialog box? I tried manually creating the credential object, but now when I run git push and it throws the anonymous access denied / auth failure, it removes the credential object from the stored credentials.

I'm going slowly out of my mind here...if I hadn't had so much trouble with the ssh agent on Windows I'd go back to beating my head against that wall. Help me, obi wan...

[whoisj]

@lanwench there are things you can do!

First, setup Git tracing ala setx GIT_TRACE C:\git-trace.txt
Second, setup Curl tracing ala set GIT_TRACE_CURL C:\git-trace.txt
Lastly, setup GCM tracing ala set GCM_TRACE C:\git-trace.txt

Now, attempt to connect again and if it fails: upload the contents of the C:\git-trace.txt file (your job to filter any sensitive data or personally identifying information). Once we have that, we'll have a ton more information to work with - THANKS!

PS: the file does not need to be C:\git-trace.txt, it can be any file that you can write to but remember that Git will not create a new folder to log to. So make sure the folder exists before running Git.

[lanwench]

Hello @whoisj - thanks for sticking with me! I feel like maybe I should send you some cookies or a teddy bear holding a heart.

Where I am now:

After I wrote last night I kept at it.

1. Completely yanked out git & credential manager (including running thru the registry).
2. Installed the GCMW from here: https://github.com/Microsoft/Git-Credential-Manager-for-Windows/releases/tag/v1.8.0 and took all the defaults (which also installed git version 2.10.0.windows.1.

Now, I get prompted in the command shell, and in the PowerShell console, and can push.
No credentials are stored/kept in the Credential Manager - I am prompted every time.
In Powershell ISE, I don't get prompted at all and just get errors.
Tried manually creating credentials git:https://enterprise.git.domain.local - didn't make any difference.

Q: Am I not supposed to be seeing a dialog box pop up? Because I haven't. This worked fine in the old wincred.

Current results:

In cmd.exe (works despite daunting messages)

C:\repos\foo>git push
Fatal: ArgumentException encountered.
Fatal: ArgumentException encountered.
Username for 'https://enterprise.git.local': jbloggs
Password for 'https://[email protected]':
Fatal: ArgumentException encountered.
Fatal: ArgumentException encountered.
Counting objects: 5, done.
Delta compression using up to 8 threads.
Compressing objects: 100% (5/5), done.
Writing objects: 100% (5/5), 430 bytes | 0 bytes/s, done.
Total 5 (delta 4), reused 0 (delta 0)
remote: Resolving deltas: 100% (4/4), completed with 4 local objects.
To https://enterprise.git.local/foo.git
b3ba52a..c04185f master -> master

In Powershell Console (works, with same messages as cmd.exe):

PS C:\repo\foo> git push
Fatal: ArgumentException encountered.
Fatal: ArgumentException encountered.
Username for 'https://enterprise.git.local/foo.git': jbloggs
Password for 'https://[email protected]/foo.git':
Fatal: ArgumentException encountered.
Fatal: ArgumentException encountered.
Counting objects: 5, done.
Delta compression using up to 8 threads.
Compressing objects: 100% (5/5), done.
Writing objects: 100% (5/5), 429 bytes | 0 bytes/s, done.
Total 5 (delta 4), reused 0 (delta 0)
remote: Resolving deltas: 100% (4/4), completed with 4 local objects.
To https://enterprise.git.local/foo.git
c04185f..830649a master -> master
PS C:\repos\foo> git status
On branch master
Your branch is up-to-date with 'origin/master'.
nothing to commit, working tree clean

In PowerShell ISE (doesn't work at all, with or without modules Posh-Git and PhatGit):

$ git push
git : Fatal: ArgumentException encountered.
Fatal: ArgumentException encountered.
bash: /dev/tty: No such device or address
error: failed to execute prompt script (exit code 1)
fatal: could not read Username for 'https://enterprise.git.local': Invalid argument
At line:1 char:1
+ git push
+ ~~~~~~~~
+ CategoryInfo : InvalidOperation: (:) [Write-Error], WriteErrorException
+ FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Invoke-PhatGit

Current configuration

Path:

$ where git
C:\Program Files\Git\cmd\git.exe

Git config:

$ git config --list
core.symlinks=false
core.autocrlf=true
core.fscache=true
color.diff=auto
color.status=auto
color.branch=auto
color.interactive=true
help.format=html
http.sslcainfo=C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt
diff.astextplain.textconv=astextplain
rebase.autosquash=true
credential.helper=manager
user.name=Joe Bloggs
[email protected]
filter.lfs.clean=git-lfs clean %f
filter.lfs.smudge=git-lfs smudge %f
filter.lfs.required=true
core.autocrlf=false
credential.modalprompt=true
credential.authority=Windows
credential.helper=manager
gui.recentrepo=C:/Users/jbloggs/git
http.emptyauth=true
core.repositoryformatversion=0
core.filemode=false
core.bare=false
core.logallrefupdates=true
core.symlinks=false
core.ignorecase=true
core.hidedotfiles=dotGitOnly
remote.origin.url=https://git.enterprise.local/foo.git
remote.origin.fetch=+refs/heads/*:refs/remotes/origin/*
branch.master.remote=origin
branch.master.merge=refs/heads/master
gui.wmstate=zoomed gui.geometry=893x435+133+408 175 196`

Sanitized output of my trace (& snipped ssl cert stuff):

```08:20:40.419284 git.c:350 trace: built-in: git 'version'
08:20:40.562299 git.c:350 trace: built-in: git 'help' '-a'
08:22:26.992196 git.c:350 trace: built-in: git 'status' '--short' '--branch'
08:22:29.035809 git.c:350 trace: built-in: git 'status'
08:22:29.145010 git.c:350 trace: built-in: git 'status' '--short' '--branch'
08:22:37.788465 git.c:350 trace: built-in: git 'add' 'Folder/Scripts/MyAwesomeFunction.ps1'
08:22:37.897666 git.c:350 trace: built-in: git 'status' '--short' '--branch'
08:22:42.158493 git.c:350 trace: built-in: git 'config' '--get-regexp' '^alias.commit$'
08:23:09.631474 git.c:350 trace: built-in: git 'commit' '-m' 'Cosmetic changes'
08:23:09.771875 git.c:350 trace: built-in: git 'status' '--short' '--branch'
08:23:11.924689 git.c:350 trace: built-in: git 'push'
08:23:11.924689 run-command.c:336 trace: run_command: 'git-remote-https' 'origin' 'https://enterprise.git.domain.local/foo.git'
08:23:12.002689 http.c:558 == Info: Couldn't find host enterprise.git.domain.local in the _netrc file; using defaults
08:23:12.018289 http.c:558 == Info: timeout on name lookup is not supported
08:23:12.018289 http.c:558 == Info: Trying 10.11.12.13...
08:23:12.033889 http.c:558 == Info: Connected to enterprise.git.domain.local (10.11.12.13) port 443 (#0)
08:23:12.221091 http.c:558 == Info: ALPN, offering http/1.1
08:23:12.221091 http.c:558 == Info: Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
08:23:12.236691 http.c:558 == Info: successfully set certificate verify locations:
08:23:12.236691 http.c:558 == Info: CAfile: C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt
CApath: none
08:23:12.236691 http.c:558 == Info: TLSv1.2 (OUT), TLS header, Certificate Status (22):
08:23:12.236691 http.c:531 => Send SSL data, 0000000005 bytes (0x00000005)
08:23:12.236691 http.c:546 => Send SSL data: .....
08:23:12.236691 http.c:558 == Info: TLSv1.2 (OUT), TLS handshake, Client hello (1):

08:23:12.252291 http.c:558 == Info: SSL certificate verify ok.
08:23:12.252291 http.c:531 => Send SSL data, 0000000005 bytes (0x00000005)
08:23:12.252291 http.c:546 => Send SSL data: .....
08:23:12.252291 http.c:505 => Send header, 0000000237 bytes (0x000000ed)
08:23:12.252291 http.c:517 => Send header: GET /foo.git/info/refs?service=git-receive-pack HTTP/1.1
08:23:12.252291 http.c:517 => Send header: Host: enterprise.git.domain.local
08:23:12.252291 http.c:517 => Send header: User-Agent: git/2.10.0.windows.1
08:23:12.252291 http.c:517 => Send header: Accept: /
08:23:12.252291 http.c:517 => Send header: Accept-Encoding: gzip
08:23:12.252291 http.c:517 => Send header: Accept-Language: en-US, ;q=0.9
08:23:12.252291 http.c:517 => Send header: Pragma: no-cache
08:23:12.252291 http.c:517 => Send header:
08:23:12.267891 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
08:23:12.267891 http.c:546 <= Recv SSL data: .....
08:23:12.267891 http.c:505 <= Recv header, 0000000037 bytes (0x00000025)
08:23:12.267891 http.c:517 <= Recv header: HTTP/1.1 401 Authorization Required
08:23:12.267891 http.c:505 <= Recv header, 0000000026 bytes (0x0000001a)
08:23:12.267891 http.c:517 <= Recv header: Server: GitHub Babel 2.0
08:23:12.267891 http.c:505 <= Recv header, 0000000026 bytes (0x0000001a)
08:23:12.267891 http.c:517 <= Recv header: Content-Type: text/plain
08:23:12.267891 http.c:505 <= Recv header, 0000000020 bytes (0x00000014)
08:23:12.267891 http.c:517 <= Recv header: Content-Length: 57
08:23:12.267891 http.c:505 <= Recv header, 0000000040 bytes (0x00000028)
08:23:12.267891 http.c:517 <= Recv header: WWW-Authenticate: Basic realm="GitHub"
08:23:12.267891 http.c:505 <= Recv header, 0000000023 bytes (0x00000017)
08:23:12.267891 http.c:517 <= Recv header: X-Frame-Options: DENY
08:23:12.267891 http.c:505 <= Recv header, 0000000002 bytes (0x00000002)
08:23:12.267891 http.c:517 <= Recv header:
08:23:12.267891 http.c:558 == Info: Ignoring the response-body
08:23:12.267891 http.c:531 <= Recv data, 0000000057 bytes (0x00000039)
08:23:12.267891 http.c:546 <= Recv data: Anonymous access to foo.git denied.
08:23:12.267891 http.c:558 == Info: Connection #0 to host enterprise.git.domain.local left intact
08:23:12.267891 http.c:558 == Info: Issue another request to this URL: 'https://enterprise.git.domain.local/foo.git/info/refs?service=git-receive-pack'
08:23:12.267891 http.c:558 == Info: Couldn't find host enterprise.git.domain.local in the _netrc file; using defaults
08:23:12.267891 http.c:558 == Info: Found bundle for host enterprise.git.domain.local: 0x5d08f0 [can pipeline]
08:23:12.267891 http.c:558 == Info: Re-using existing connection! (#0) with host enterprise.git.domain.local
08:23:12.267891 http.c:558 == Info: Connected to enterprise.git.domain.local (10.11.12.13) port 443 (#0)
08:23:12.267891 http.c:558 == Info: Server auth using Basic with user ''
08:23:12.267891 http.c:531 => Send SSL data, 0000000005 bytes (0x00000005)
08:23:12.267891 http.c:546 => Send SSL data: ....
08:23:12.267891 http.c:505 => Send header, 0000000264 bytes (0x00000108)
08:23:12.267891 http.c:517 => Send header: GET /foo.git/info/refs?service=git-receive-pack HTTP/1.1
08:23:12.267891 http.c:517 => Send header: Host: enterprise.git.domain.local
08:23:12.267891 http.c:517 => Send header: Authorization: Basic
08:23:12.267891 http.c:517 => Send header: User-Agent: git/2.10.0.windows.1
08:23:12.267891 http.c:517 => Send header: Accept: */
08:23:12.267891 http.c:517 => Send header: Accept-Encoding: gzip
08:23:12.267891 http.c:517 => Send header: Accept-Language: en-US, *;q=0.9
08:23:12.267891 http.c:517 => Send header: Pragma: no-cache
08:23:12.267891 http.c:517 => Send header:
08:23:12.283491 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
08:23:12.283491 http.c:546 <= Recv SSL data: .....
08:23:12.283491 http.c:505 <= Recv header, 0000000037 bytes (0x00000025)
08:23:12.283491 http.c:517 <= Recv header: HTTP/1.1 401 Authorization Required
08:23:12.283491 http.c:505 <= Recv header, 0000000026 bytes (0x0000001a)
08:23:12.283491 http.c:517 <= Recv header: Server: GitHub Babel 2.0
08:23:12.283491 http.c:505 <= Recv header, 0000000026 bytes (0x0000001a)
08:23:12.283491 http.c:517 <= Recv header: Content-Type: text/plain
08:23:12.283491 http.c:505 <= Recv header, 0000000020 bytes (0x00000014)
08:23:12.283491 http.c:517 <= Recv header: Content-Length: 57
08:23:12.283491 http.c:558 == Info: Authentication problem. Ignoring this.
08:23:12.283491 http.c:505 <= Recv header, 0000000040 bytes (0x00000028)
08:23:12.283491 http.c:517 <= Recv header: WWW-Authenticate: Basic realm="GitHub"
08:23:12.283491 http.c:505 <= Recv header, 0000000023 bytes (0x00000017)
08:23:12.283491 http.c:517 <= Recv header: X-Frame-Options: DENY
08:23:12.283491 http.c:505 <= Recv header, 0000000002 bytes (0x00000002)
08:23:12.283491 http.c:517 <= Recv header:
08:23:12.283491 http.c:531 <= Recv data, 0000000057 bytes (0x00000039)
08:23:12.283491 http.c:546 <= Recv data: Anonymous access to foo.git denied.
08:23:12.283491 http.c:558 == Info: Connection #0 to host enterprise.git.domain.local left intact
08:23:12.299091 run-command.c:336 trace: run_command: 'git credential-manager get'
08:23:12.470692 git.c:564 trace: exec: 'git-credential-manager' 'get'
08:23:12.470692 run-command.c:336 trace: run_command: 'git-credential-manager' 'get'
08:23:12.626693 run-command.c:336 trace: run_command: 'git credential-manager get'
08:23:12.657893 git.c:564 trace: exec: 'git-credential-manager' 'get'
08:23:12.657893 run-command.c:336 trace: run_command: 'git-credential-manager' 'get'
08:23:12.735894 run-command.c:336 trace: run_command: 'bash' '-c' 'cat >/dev/tty && read -r line 08:23:12.938695 git.c:350 trace: built-in: git 'status' '--short' '--branch'```

[whoisj]

@lanwench firstly, that some very impressive diagnostic information there: THANK YOU!!! 🙇

Unfortunately, I do not see the expected output from GCM_TRACE having been set.

I see trace: run_command: 'git credential-manager get but not the following GCM logs I expected. This could be a serious issue, or just the absence of the GCM_TRACE environment variable being set.

Let me know.

[whoisj]

Oh... I do see this in the log:

08:23:12.283491 http.c:517              <= Recv header: WWW-Authenticate: Basic realm="GitHub"
08:23:12.283491 http.c:505              <= Recv header, 0000000023 bytes (0x00000017)
08:23:12.283491 http.c:517              <= Recv header: X-Frame-Options: DENY
08:23:12.283491 http.c:505              <= Recv header, 0000000002 bytes (0x00000002)
08:23:12.283491 http.c:517              <= Recv header:
08:23:12.283491 http.c:531              <= Recv data, 0000000057 bytes (0x00000039)
08:23:12.283491 http.c:546              <= Recv data: Anonymous access to foo.git denied.

that 08:23:12.283491 http.c:517 <= Recv header: WWW-Authenticate: Basic realm="GitHub" means the server is only accepting Basic Authentication, and it seems you've specified credential.authority=Windows. Can you try removing that config value or setting it to credential.authority=Basic instead?

[lanwench]

Oops, just saw this! And thank you. I've been complimented on my diagnostic information for years but a girl always likes to hear it.

Imma try again.

[lanwench]

Alas, still no dice.
I re-set the environment variables to ensure they were all there.
I changed the credential.authority from windows to basic.
C:\> git config --global credential.authority basic
C:\> git config --list core.symlinks=false core.autocrlf=true core.fscache=true color.diff=auto color.status=auto color.branch=auto color.interactive=true help.format=html http.sslcainfo=C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt diff.astextplain.textconv=astextplain rebase.autosquash=true credential.helper=manager user.name=Joe Bloggs [email protected] filter.lfs.clean=git-lfs clean %f filter.lfs.smudge=git-lfs smudge %f filter.lfs.required=true core.autocrlf=false credential.modalprompt=true credential.authority=basic credential.helper=manager gui.recentrepo=C:/repos/foo http.emptyauth=true core.repositoryformatversion=0 core.filemode=false core.bare=false core.logallrefupdates=true core.symlinks=false core.ignorecase=true core.hidedotfiles=dotGitOnly remote.origin.url=https://enterprise.git.domain.local/foo.git remote.origin.fetch=+refs/heads/*:refs/remotes/origin/* branch.master.remote=origin branch.master.merge=refs/heads/master gui.wmstate=zoomed gui.geometry=893x435+133+408 175 196

I can invoke git push in the command prompt (and am prompted for credentials every time)
C:\repos\foo>git push Fatal: ArgumentException encountered. Fatal: ArgumentException encountered. Username for 'https://enterprise.git.domain.local': jbloggs Password for 'https://[email protected]': Fatal: ArgumentException encountered. Fatal: ArgumentException encountered. Counting objects: 12, done. Delta compression using up to 8 threads. Compressing objects: 100% (12/12), done. Writing objects: 100% (12/12), 10.23 KiB | 0 bytes/s, done. Total 12 (delta 4), reused 0 (delta 0) remote: Resolving deltas: 100% (4/4), completed with 1 local objects. To https://enterprise.git.domain.local/foo.git 3273210..aee0eca master -> master
I can invoke git push in the PowerShell console (and am prompted for credentials every time - output is identical to the above)

I cannot invoke git push in PowerShell ISE:
````
PS C:\repos\foo> git push
git : Fatal: ArgumentException encountered.
At line:1 char:1

• git push
• ~~~~
• CategoryInfo : NotSpecified: (Fatal: ArgumentException encountered.:String) [], RemoteException
• FullyQualifiedErrorId : NativeCommandError

Fatal: ArgumentException encountered.
bash: /dev/tty: No such device or address
error: failed to execute prompt script (exit code 1)
fatal: could not read Username for 'https://enterprise.git.domain.local': Invalid argument
````

I also tried removing the stored credential object that I had manually saved, and it does not create a new one when I get prompted in cmd or PS.

Really not sure what else to do here, and this has cut into my productivity quite badly. Any other suggestions? Should I just go back to wincred?

````
12:53:06.478568 git.c:350 trace: built-in: git 'push'
12:53:06.479568 run-command.c:336 trace: run_command: 'git-remote-https' 'origin' 'https://enterprise.git.domain.local/foo.git'
12:53:06.519572 http.c:558 == Info: Couldn't find host enterprise.git.domain.local in the _netrc file; using defaults
12:53:06.519572 http.c:558 == Info: timeout on name lookup is not supported
12:53:06.524572 http.c:558 == Info: Trying 10.11.12.13...
12:53:06.531573 http.c:558 == Info: Connected to enterprise.git.domain.local (10.11.12.13) port 443 (#0)
12:53:06.738594 http.c:558 == Info: ALPN, offering http/1.1
12:53:06.738594 http.c:558 == Info: Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
12:53:06.747595 http.c:558 == Info: successfully set certificate verify locations:
12:53:06.747595 http.c:558 == Info: CAfile: C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt
CApath: none
12:53:06.747595 http.c:558 == Info: TLSv1.2 (OUT), TLS header, Certificate Status (22):
12:53:06.747595 http.c:531 => Send SSL data, 0000000005 bytes (0x00000005)
12:53:06.747595 http.c:546 => Send SSL data: .....
12:53:06.747595 http.c:558 == Info: TLSv1.2 (OUT), TLS handshake, Client hello (1):
12:53:06.747595 http.c:531 => Send SSL data, 0000000512 bytes (0x00000200)

12:53:06.788599 http.c:558 == Info: SSL certificate verify ok.
12:53:06.788599 http.c:531 => Send SSL data, 0000000005 bytes (0x00000005)
12:53:06.788599 http.c:546 => Send SSL data: .....
12:53:06.788599 http.c:505 => Send header, 0000000237 bytes (0x000000ed)
12:53:06.788599 http.c:517 => Send header: GET /foo.git/info/refs?service=git-receive-pack HTTP/1.1
12:53:06.788599 http.c:517 => Send header: Host: enterprise.git.domain.local
12:53:06.788599 http.c:517 => Send header: User-Agent: git/2.10.0.windows.1
12:53:06.788599 http.c:517 => Send header: Accept: /
12:53:06.788599 http.c:517 => Send header: Accept-Encoding: gzip
12:53:06.788599 http.c:517 => Send header: Accept-Language: en-US, ;q=0.9
12:53:06.788599 http.c:517 => Send header: Pragma: no-cache
12:53:06.788599 http.c:517 => Send header:
12:53:06.817602 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:06.817602 http.c:546 <= Recv SSL data: .....
12:53:06.817602 http.c:505 <= Recv header, 0000000037 bytes (0x00000025)
12:53:06.817602 http.c:517 <= Recv header: HTTP/1.1 401 Authorization Required
12:53:06.817602 http.c:505 <= Recv header, 0000000026 bytes (0x0000001a)
12:53:06.817602 http.c:517 <= Recv header: Server: GitHub Babel 2.0
12:53:06.817602 http.c:505 <= Recv header, 0000000026 bytes (0x0000001a)
12:53:06.817602 http.c:517 <= Recv header: Content-Type: text/plain
12:53:06.817602 http.c:505 <= Recv header, 0000000020 bytes (0x00000014)
12:53:06.817602 http.c:517 <= Recv header: Content-Length: 57
12:53:06.817602 http.c:505 <= Recv header, 0000000040 bytes (0x00000028)
12:53:06.817602 http.c:517 <= Recv header: WWW-Authenticate: Basic realm="GitHub"
12:53:06.817602 http.c:505 <= Recv header, 0000000023 bytes (0x00000017)
12:53:06.817602 http.c:517 <= Recv header: X-Frame-Options: DENY
12:53:06.817602 http.c:505 <= Recv header, 0000000002 bytes (0x00000002)
12:53:06.817602 http.c:517 <= Recv header:
12:53:06.817602 http.c:558 == Info: Ignoring the response-body
12:53:06.817602 http.c:531 <= Recv data, 0000000057 bytes (0x00000039)
12:53:06.817602 http.c:546 <= Recv data: Anonymous access to foo.git denied.
12:53:06.817602 http.c:558 == Info: Connection #0 to host enterprise.git.domain.local left intact
12:53:06.817602 http.c:558 == Info: Issue another request to this URL: 'https://enterprise.git.domain.local/foo.git/info/refs?service=git-receive-pack'
12:53:06.817602 http.c:558 == Info: Couldn't find host enterprise.git.domain.local in the _netrc file; using defaults
12:53:06.817602 http.c:558 == Info: Found bundle for host enterprise.git.domain.local: 0x75ecf0 [can pipeline]
12:53:06.817602 http.c:558 == Info: Re-using existing connection! (#0) with host enterprise.git.domain.local
12:53:06.817602 http.c:558 == Info: Connected to enterprise.git.domain.local (10.11.12.13) port 443 (#0)
12:53:06.818602 http.c:558 == Info: Server auth using Basic with user ''
12:53:06.818602 http.c:531 => Send SSL data, 0000000005 bytes (0x00000005)
12:53:06.818602 http.c:546 => Send SSL data: ....
12:53:06.818602 http.c:505 => Send header, 0000000264 bytes (0x00000108)
12:53:06.818602 http.c:517 => Send header: GET /foo.git/info/refs?service=git-receive-pack HTTP/1.1
12:53:06.818602 http.c:517 => Send header: Host: enterprise.git.domain.local
12:53:06.818602 http.c:517 => Send header: Authorization: Basic
12:53:06.818602 http.c:517 => Send header: User-Agent: git/2.10.0.windows.1
12:53:06.818602 http.c:517 => Send header: Accept: */
12:53:06.818602 http.c:517 => Send header: Accept-Encoding: gzip
12:53:06.818602 http.c:517 => Send header: Accept-Language: en-US, *;q=0.9
12:53:06.818602 http.c:517 => Send header: Pragma: no-cache
12:53:06.818602 http.c:517 => Send header:
12:53:06.846605 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:06.846605 http.c:546 <= Recv SSL data: .....
12:53:06.846605 http.c:505 <= Recv header, 0000000037 bytes (0x00000025)
12:53:06.846605 http.c:517 <= Recv header: HTTP/1.1 401 Authorization Required
12:53:06.846605 http.c:505 <= Recv header, 0000000026 bytes (0x0000001a)
12:53:06.846605 http.c:517 <= Recv header: Server: GitHub Babel 2.0
12:53:06.846605 http.c:505 <= Recv header, 0000000026 bytes (0x0000001a)
12:53:06.846605 http.c:517 <= Recv header: Content-Type: text/plain
12:53:06.846605 http.c:505 <= Recv header, 0000000020 bytes (0x00000014)
12:53:06.846605 http.c:517 <= Recv header: Content-Length: 57
12:53:06.846605 http.c:558 == Info: Authentication problem. Ignoring this.
12:53:06.846605 http.c:505 <= Recv header, 0000000040 bytes (0x00000028)
12:53:06.846605 http.c:517 <= Recv header: WWW-Authenticate: Basic realm="GitHub"
12:53:06.846605 http.c:505 <= Recv header, 0000000023 bytes (0x00000017)
12:53:06.846605 http.c:517 <= Recv header: X-Frame-Options: DENY
12:53:06.846605 http.c:505 <= Recv header, 0000000002 bytes (0x00000002)
12:53:06.846605 http.c:517 <= Recv header:
12:53:06.846605 http.c:531 <= Recv data, 0000000057 bytes (0x00000039)
12:53:06.846605 http.c:546 <= Recv data: Anonymous access to foo.git denied.
12:53:06.846605 http.c:558 == Info: Connection #0 to host enterprise.git.domain.local left intact
12:53:06.847605 run-command.c:336 trace: run_command: 'git credential-manager get'
12:53:06.916612 git.c:564 trace: exec: 'git-credential-manager' 'get'
12:53:06.916612 run-command.c:336 trace: run_command: 'git-credential-manager' 'get'
12:53:06.994619 run-command.c:336 trace: run_command: 'git credential-manager get'
12:53:07.035624 git.c:564 trace: exec: 'git-credential-manager' 'get'
12:53:07.035624 run-command.c:336 trace: run_command: 'git-credential-manager' 'get'
12:53:07.112631 run-command.c:336 trace: run_command: 'bash' '-c' 'cat >/dev/tty && read -r line 12:53:09.565877 run-command.c:336 trace: run_command: 'bash' '-c' 'cat >/dev/tty && read -r -s line 12:53:12.359156 http.c:558 == Info: Couldn't find host enterprise.git.domain.local in the _netrc file; using defaults
12:53:12.359156 http.c:558 == Info: Found bundle for host enterprise.git.domain.local: 0x75ecf0 [can pipeline]
12:53:12.359156 http.c:558 == Info: NTLM-proxy picked AND auth done set, clear picked!
12:53:12.359156 http.c:558 == Info: timeout on name lookup is not supported
12:53:12.359156 http.c:558 == Info: Hostname enterprise.git.domain.local was found in DNS cache
12:53:12.359156 http.c:558 == Info: Trying 10.11.12.13...
12:53:12.376158 http.c:558 == Info: Connected to enterprise.git.domain.local (10.11.12.13) port 443 (#1)
12:53:12.376158 http.c:558 == Info: ALPN, offering http/1.1
12:53:12.376158 http.c:558 == Info: Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
12:53:12.395159 http.c:558 == Info: successfully set certificate verify locations:
12:53:12.395159 http.c:558 == Info: CAfile: C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt CApath: none
12:53:12.395159 http.c:558 == Info: SSL re-using session ID
12:53:12.395159 http.c:531 => Send SSL data, 0000000005 bytes (0x00000005)
12:53:12.395159 http.c:546 => Send SSL data: .....

12:53:12.574177 http.c:546 <= Recv data: 0....
12:53:12.574177 http.c:558 == Info: Connection #1 to host enterprise.git.domain.local left intact
12:53:12.575177 run-command.c:336 trace: run_command: 'git credential-manager store'
12:53:12.655185 git.c:564 trace: exec: 'git-credential-manager' 'store'
12:53:12.656186 run-command.c:336 trace: run_command: 'git-credential-manager' 'store'
12:53:12.757196 run-command.c:336 trace: run_command: 'git credential-manager store'
12:53:12.797200 git.c:564 trace: exec: 'git-credential-manager' 'store'
12:53:12.798200 run-command.c:336 trace: run_command: 'git-credential-manager' 'store'
12:53:12.877208 run-command.c:336 trace: run_command: 'send-pack' '--stateless-rpc' '--helper-status' '--thin' '--progress' 'https://enterprise.git.domain.local/foo.git/' '--stdin'
12:53:12.899210 git.c:350 trace: built-in: git 'send-pack' '--stateless-rpc' '--helper-status' '--thin' '--progress' 'https://enterprise.git.domain.local/foo.git/' '--stdin'
12:53:12.903210 run-command.c:336 trace: run_command: 'pack-objects' '--all-progress-implied' '--revs' '--stdout' '--thin' '--delta-base-offset' '--progress'
12:53:12.927213 git.c:350 trace: built-in: git 'pack-objects' '--all-progress-implied' '--revs' '--stdout' '--thin' '--delta-base-offset' '--progress'
12:53:12.943214 http.c:558 == Info: Couldn't find host enterprise.git.domain.local in the _netrc file; using defaults
12:53:12.943214 http.c:558 == Info: Found bundle for host enterprise.git.domain.local: 0x75ecf0 [can pipeline]
12:53:12.943214 http.c:558 == Info: Re-using existing connection! (#1) with host enterprise.git.domain.local
12:53:12.943214 http.c:558 == Info: Connected to enterprise.git.domain.local (10.11.12.13) port 443 (#1)
12:53:12.943214 http.c:558 == Info: Server auth using Basic with user 'jbloggs'
12:53:12.943214 http.c:531 => Send SSL data, 0000000005 bytes (0x00000005)
12:53:12.943214 http.c:546 => Send SSL data: .....

12:53:12.944214 http.c:558 == Info: upload completely sent off: 2091 out of 2091 bytes
12:53:13.065226 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:13.065226 http.c:546 <= Recv SSL data: ....3
12:53:13.065226 http.c:505 <= Recv header, 0000000017 bytes (0x00000011)
12:53:13.065226 http.c:517 <= Recv header: HTTP/1.1 200 OK
12:53:13.065226 http.c:505 <= Recv header, 0000000026 bytes (0x0000001a)
12:53:13.065226 http.c:517 <= Recv header: Server: GitHub Babel 2.0
12:53:13.065226 http.c:505 <= Recv header, 0000000053 bytes (0x00000035)
12:53:13.065226 http.c:517 <= Recv header: Content-Type: application/x-git-receive-pack-result
12:53:13.065226 http.c:505 <= Recv header, 0000000028 bytes (0x0000001c)
12:53:13.065226 http.c:517 <= Recv header: Transfer-Encoding: chunked
12:53:13.065226 http.c:505 <= Recv header, 0000000040 bytes (0x00000028)
12:53:13.065226 http.c:517 <= Recv header: Expires: Fri, 01 Jan 1980 00:00:00 GMT
12:53:13.065226 http.c:505 <= Recv header, 0000000018 bytes (0x00000012)
12:53:13.065226 http.c:517 <= Recv header: Pragma: no-cache
12:53:13.065226 http.c:505 <= Recv header, 0000000053 bytes (0x00000035)
12:53:13.065226 http.c:517 <= Recv header: Cache-Control: no-cache, max-age=0, must-revalidate
12:53:13.065226 http.c:505 <= Recv header, 0000000023 bytes (0x00000017)
12:53:13.065226 http.c:517 <= Recv header: Vary: Accept-Encoding
12:53:13.065226 http.c:505 <= Recv header, 0000000023 bytes (0x00000017)
12:53:13.065226 http.c:517 <= Recv header: X-Frame-Options: DENY
12:53:13.065226 http.c:505 <= Recv header, 0000000002 bytes (0x00000002)
12:53:13.065226 http.c:517 <= Recv header:
12:53:13.083228 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:13.083228 http.c:546 <= Recv SSL data: ....A
12:53:13.083228 http.c:531 <= Recv data, 0000000041 bytes (0x00000029)
12:53:13.083228 http.c:546 <= Recv data: 25..0025.Resolving deltas: 0% (0/7) .
12:53:13.084228 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:13.084228 http.c:546 <= Recv SSL data: .....
12:53:13.084228 http.c:531 <= Recv data, 0000000002 bytes (0x00000002)
12:53:13.084228 http.c:546 <= Recv data: ..
12:53:13.084228 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:13.084228 http.c:546 <= Recv SSL data: ....C
12:53:13.084228 http.c:531 <= Recv data, 0000000043 bytes (0x0000002b)
12:53:13.084228 http.c:546 <= Recv data: 25..0025.Resolving deltas: 28% (2/7) ...
12:53:13.084228 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:13.084228 http.c:546 <= Recv SSL data: ....C
12:53:13.084228 http.c:531 <= Recv data, 0000000043 bytes (0x0000002b)
12:53:13.084228 http.c:546 <= Recv data: 25..0025.Resolving deltas: 42% (3/7) ...
12:53:13.085228 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:13.085228 http.c:546 <= Recv SSL data: ....C
12:53:13.085228 http.c:531 <= Recv data, 0000000043 bytes (0x0000002b)
12:53:13.085228 http.c:546 <= Recv data: 25..0025.Resolving deltas: 57% (4/7) ...
12:53:13.086229 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:13.086229 http.c:546 <= Recv SSL data: ....C
12:53:13.086229 http.c:531 <= Recv data, 0000000043 bytes (0x0000002b)
12:53:13.086229 http.c:546 <= Recv data: 25..0025.Resolving deltas: 71% (5/7) ...
12:53:13.087229 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:13.087229 http.c:546 <= Recv SSL data: ....A
12:53:13.087229 http.c:531 <= Recv data, 0000000041 bytes (0x00000029)
12:53:13.087229 http.c:546 <= Recv data: 25..0025.Resolving deltas: 85% (6/7) .
12:53:13.087229 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:13.087229 http.c:546 <= Recv SSL data: .....
12:53:13.087229 http.c:531 <= Recv data, 0000000002 bytes (0x00000002)
12:53:13.087229 http.c:546 <= Recv data: ..
12:53:13.088229 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:13.088229 http.c:546 <= Recv SSL data: .....
12:53:13.088229 http.c:531 <= Recv data, 0000000004 bytes (0x00000004)
12:53:13.088229 http.c:546 <= Recv data: 63..
12:53:13.090229 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:13.090229 http.c:546 <= Recv SSL data: ....}
12:53:13.090229 http.c:531 <= Recv data, 0000000101 bytes (0x00000065)
12:53:13.090229 http.c:546 <= Recv data: 0063.Resolving deltas: 100% (7/7) .Resolving deltas: 100%
12:53:13.090229 http.c:546 <= Recv data: (7/7), completed with 6 local objects....
12:53:14.766397 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:14.766397 http.c:546 <= Recv SSL data: ....1
12:53:14.766397 http.c:531 <= Recv data, 0000000025 bytes (0x00000019)
12:53:14.766397 http.c:546 <= Recv data: 13..0013.000eunpack ok...
12:53:14.766397 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:14.766397 http.c:546 <= Recv SSL data: ....<
12:53:14.766397 http.c:531 <= Recv data, 0000000036 bytes (0x00000024)
12:53:14.766397 http.c:546 <= Recv data: 1e..001e.0019ok refs/heads/master...
12:53:15.129433 http.c:531 <= Recv SSL data, 0000000005 bytes (0x00000005)
12:53:15.129433 http.c:546 <= Recv SSL data: ....4
12:53:15.129433 http.c:531 <= Recv data, 0000000028 bytes (0x0000001c)
12:53:15.129433 http.c:546 <= Recv data: 9..0009.0000..4..0000..0....
12:53:15.129433 http.c:558 == Info: Connection #1 to host enterprise.git.domain.local left intact
````

[whoisj]

OK so we see:

git : Fatal: ArgumentException encountered.
At line:1 char:1
+ git push
+ ~~~~~~~~
+ CategoryInfo : NotSpecified: (Fatal: ArgumentException encountered.:String) [], RemoteException
+ FullyQualifiedErrorId : NativeCommandErro

which means that there's a bug in the GCM for sure. I wonder which argument is killing it.

Did you have GCM_TRACE set? If so, did you collect any output from it? If so, can you share it here?

[lanwench]

Hello! Missed this, sorry. Here you go....did I do this right? I sent over the entire output of git-trace.txt, above (aside from obfuscation & removal of SSL stuff).

$ GCI env: | Where {$_.Name -match 'Trace'}
Name Value ---- ----- GCM_TRACE c:\fixmygit\git-trace.txt GIT_TRACE c:\fixmygit\git-trace.txt GIT_TRACE_CURL c:\fixmygit\git-trace.txt

[whoisj]

Hi @lanwench my apologies for the delayed reply, I was is Brussels for the past week attending GitMerge.

So, your environment variables look to be correctly set, yet we're not seeing the GCM write to the trace log. This suggests to me that the GCM you're using is very old - and that alone could be your problem. Tracing was added in 1.8.0 (I believe), and we've fixed several bugs related to NTLM since then.

Can you verify the version of the GCM your running? Assuming your version isn't insanely old git credential-manager version should tell you the version that Git is using. Thanks!

[lanwench]

OMG, that was it. I have no idea how this came to pass, given that I had last installed this: https://github.com/Microsoft/Git-Credential-Manager-for-Windows/releases/tag/v1.8.0
which installed git 2.10; I took all the defaults.

````
$ git --version
git version 2.10.0.windows.1

$ git credential-manager version
Git Credential Manager for Windows version 1.6.1
``` I didn't even look at that because Windows programs & features has continuously shownMicrosoft Git Credential Manager for Windows 1.8.0` (screenshot available upon request)... wt* ? Maybe some shard that escaped me during my last registry scrub? Whatever.

I just now re-ran a new download of the gcmw 1.8.0 executable (which did a very quick repair-type setup) and now have:
$ git credential-manager version Git Credential Manager for Windows version 1.8.0
Tried a push and was prompted with the modal dialog box, and everything worked. WHEW. I don't even care how this happened anymore if it stays fixed!

Thank you so much for sticking with me. You are entirely forgiven for going to Belgium. Hope you got some good frites. :-)

[whoisj]

Great! Very happy to see this resolved. 😀

The reason you could see a discrepancy in the in the Add / Remove Programs listing and the command line is that you likely DID have 1.8.0 installed, however the version Git was invoking was older (for unknown reasons).