Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

git bitbucket unauthorized

Hello!

yesterday or in any case in the past few days we encountered authentication problems from our jenkins application towards the git repository managed by bitbucket (of which the log I report). Since we have never changed our login credentials, we wonder if by any chance you have had any disruption that could have impacted git authentication.

Thanks

Attempting to resolve master from remote references...
 > git --version # timeout=10
 > git --version # 'git version 2.20.2'
using GIT_ASKPASS to set credentials Bitbucket
 > git ls-remote -h -- https://bitbucket.org/soldotech/jenkins-pipeline/ # timeout=10
ERROR: Checkout failed
hudson.plugins.git.GitException: Command "git ls-remote -h -- https://bitbucket.org/soldotech/jenkins-pipeline/" returned status code 128:
stdout: 
stderr: remote: Because your Atlassian account admin requires single sign-on, you'll need to authenticate with an app password. Create an app password at https://bitbucket.org/account/admin/app-passwords
fatal: unable to access 'https://bitbucket.org/soldotech/jenkins-pipeline/': The requested URL returned error: 403

	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandIn(CliGitAPIImpl.java:2450)
	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandWithCredentials(CliGitAPIImpl.java:2051)
	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandWithCredentials(CliGitAPIImpl.java:1951)
	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandWithCredentials(CliGitAPIImpl.java:1942)
	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.getRemoteReferences(CliGitAPIImpl.java:3381)
	at jenkins.plugins.git.AbstractGitSCMSource.retrieve(AbstractGitSCMSource.java:838)
	at jenkins.scm.api.SCMSource.fetch(SCMSource.java:636)

 

1 answer

0 votes

Hi Livio,

Did you recently verify a domain for your organization as per https://confluence.atlassian.com/cloud/verify-a-domain-for-your-organization-873871234.html ?

Checking in our system, I can see that the Bitbucket account with same email as your Community account is a managed account.

When a domain is verified as per the documentation above, all Atlassian accounts with an email from this domain become managed.

If you have a managed account, HTTPS authentication when cloning/pulling from Bitbucket Cloud repos is no longer possible with a password, and an app-password should be generated and used instead.

If this started occurring the last few days, I would assume that it was because you verified the domain.

You can create an app-password for the Bitbucket Cloud account that you use for authentication in Jenkins as per the following documentation:

and use this app-password in Jenkins, instead of the account's password.

Please feel free to let me know if this works for you and if you have any questions.

Kind regards,
Theodora

hello!

thanks for the answare. I'm still using an app password generated from mine atlassian account (lpatavini@soldo.com). Another strange thing is that the problem is not persistent but intermittent (about 1 time each 10 tries).

What could be? Could you make a search from server side logs? I have a case of error just from few minutes ago:

 

 > git ls-remote -h -- https://bitbucket.org/soldotech/jenkins-pipeline/ # timeout=10
ERROR: Checkout failed
hudson.plugins.git.GitException: Command "git ls-remote -h -- https://bitbucket.org/soldotech/jenkins-pipeline/" returned status code 128:
stdout: 
stderr: remote: Because your Atlassian account admin requires single sign-on, you'll need to authenticate with an app password. Create an app password at https://bitbucket.org/account/admin/app-passwords
fatal: unable to access 'https://bitbucket.org/soldotech/jenkins-pipeline/': The requested URL returned error: 403
 

job launched 17-nov-2020 9.26.

Screenshot at Nov 17 18-01-28.pnghere i'm using the app password in place of normal login password.

Hi Livio,

Thank you for the info!

If this issue occurs intermittently, I believe the most likely reason would be a cached password in a Git credential manager on that machine. Checking our logs, I can also see intermittent 403 errors and I also see several requests where a password is used instead of an app-password.

Could you please let me know:

  • What operating system do you have on the machine where Jenkins is running?
  • Do you use another Git client application on the same machine, e.g. SourceTree or something else?
  • Or do you perform Git operations via HTTPS via terminal/Git Bash from that machine?

Kind regards,
Theodora

Suggest an answer

Log in or Sign up to answer
TAGS
Community showcase
Published in Bitbucket

New improvements to user management in Bitbucket Cloud 👥

Hey Community! We’re willing to wager that quite a few of you not only use Bitbucket, but administer it too. Our team is excited to share that we’ll be releasing improvements throughout this month of...

3,776 views 10 16
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you