Connection & Authentication

How do I register GitHub repositories with two-factor authentication?

To use two-factor authentication in GitHub, you need to create a personal access token first.

  1. Create a personal access token and use it in place of a password when performing Git operations over HTTPS with GIT on the command line or the API. For detailed information, refer to https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token

  2. Register your GitHub Repository in ARM using the same token.

How do I rectify the GOLDENDOODLE vulnerability?

  1. Short-term solution: Disable support for CBC encryption ciphers. Follow the procedures below to disable weak ciphers:

    • Run the following command to list the ciphers: - sshd -T | grep ciphers | perl -pe 's/,/\n/g' | sort -u

    • Edit the file - /etc/ssh/sshd_config and add what strong ciphers you want to have or place in this file as shown in the example below- Ciphers aes128-ctr,aes192-ctr,aes256-ctr

    • Now, restart your sshd service using the command:  service sshd restart

  2. Long-term solution: Enable the TLS 1.3 protocol.

Why does AutoRABIT need to install GDM (Gnome Desktop Manager) on the virtual machine of the client?

  1. To run Selenium scripts in the TAF module of the ARM application, GDM is necessary.

  2. It will not affect Version Control; however, it may have an influence on the CI Job module.

Why am I not able to authenticate JIRA with my account?

Make sure you are entering the JIRA API token in the Password field while registering your JIRA plugin for the first time in the ARM application.

How do I generate a new API token for JIRA?

Follow the below steps to generate a new API token for JIRA:

  1. Click on Create API Token and provide the label name and click on Create.

  2. Once the token is created, you will be able to see the Your new API token popup. Click on the Copy to Clipboard.

  3. Use the copied token as a password for creating/updating the credential in AutoRABIT.

  4. Once updated please use the same credential to authenticate the JIRA.

How can I add a repository to AutoRABIT if one already exists?

Follow the below steps to register the repository:

  • Login to your repository and click on Clone. It will give you a https and a ssh link.

  • To register the repository, copy the https link and paste it into ARM.

  • Make sure the repo clone you see before https isn't included in the link you paste into ARM.

  • You will just need to input the URL that begins with https.

Why am I unable to register a GitHub repository using SSH keys and getting an 'invalid private key' error?

This is because you used invalid SSH keys to register your repository. Please use the correct SSH keys and try again.

How do I validate the 'src' folder under branch settings?

When you try to create a new branch you must validate the master branch's 'src' folder path, then select the parent branch as master, and the 'src' folder path will be automatically set to the newly created branch.

How does an SSH Key differ from an SSH Certificate?

While SSH Key-based authentication uses public key cryptography, SSH Certificate-based authentication attaches a signed certificate to each key to verify their identities. By using a certificate signed by a trusted Certificate Authority, users can do away with the passwords (which are not secure, given that passwords can either be stolen or cracked via brute force) and leverage a partially automated trust-based certificate authentication process to gain access to systems.

Last updated