Re: I can take down our private gitlab instance with one command

2016-07-22 Thread Dan Kegel
Tried it with plain old https authentication via prompting or cache, worked fine. Tried it with plain old https authentication via jamming username and password into git url, got the infinite loop again. That narrows it down a bit - has nothing to do with ci tokens, and more to do with how urls c

Re: I can take down our private gitlab instance with one command

2016-07-22 Thread Dan Kegel
On Fri, Jul 22, 2016 at 3:38 PM, Stan Hu wrote: > Thanks for reporting. You may want to try disabling Rack Attack until we > resolve the issue. Thanks. Tried that. Now the symptom is different: $ git lfs install $ git lfs clone https://gitlab-ci-token:remo...@gitlab.removed.com/pastries/funkyc

Re: I can take down our private gitlab instance with one command

2016-07-22 Thread Stan Hu
Thanks for reporting. You may want to try disabling Rack Attack until we resolve the issue. To /etc/gitlab/gitlab.rb, add: gitlab_rails['rack_attack_git_basic_auth'] = { 'enabled' => false } Then run `sudo gitlab-ctl reconfigure`. On Fri, Jul 22, 2016 at 3:12 PM, Dan Kegel wrote: > All I ha