{"thread":{"id":"15861","subject":"User Authentication ?","startedAt":"2008-10-11T16:41:33Z","lastAt":"2008-10-13T08:23:06Z","messageCount":4,"participants":["Neshama Parhoti","Jakub Narebski"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"92802","messageId":"912ec82a0810110941t33343fe1mfe1bce58739f79fa@mail.gmail.com","threadId":"15861","inReplyTo":null,"subject":"User Authentication ?","fromName":"Neshama Parhoti","fromEmail":"pneshama@gmail.com","sentAt":"2008-10-11T16:41:33Z","receivedAt":"2008-10-11T16:41:33Z","isPatch":false,"sender":{"key":"pneshama@gmail.com","avatar":null},"body":"Hi All,\n\nI want to setup a git server on the web but I need user authentication.\n\n>From what I understand, currently git-daemon does not support authentication.\n\nIs there any way to achieve that ?\n\nI really don't want to give ssh logins for people who I just want to\nbe able to access my repository...\n\nThank you,\nPnesh.\n"},{"id":"92803","messageId":"m3y70vj8ag.fsf@localhost.localdomain","threadId":"15861","inReplyTo":"912ec82a0810110941t33343fe1mfe1bce58739f79fa@mail.gmail.com","subject":"Re: User Authentication ?","fromName":"Jakub Narebski","fromEmail":"jnareb@gmail.com","sentAt":"2008-10-11T18:28:29Z","receivedAt":"2008-10-11T18:28:29Z","isPatch":false,"sender":{"key":"jnareb@gmail.com","avatar":"https://avatars.githubusercontent.com/u/2706?v=4"},"body":"\"Neshama Parhoti\" <pneshama@gmail.com> writes:\n\n> I want to setup a git server on the web but I need user\n> authentication.\n> \n> From what I understand, currently git-daemon does not support\n> authentication.\n\nThe purpose of git-daemon is to allow fast (and bandwidth-saving)\nanonymous read-only (fetch) access to git repositories.  The ability\nto push via git-daemon was added later, and is turned off by default\nbecause it should be used only in special situation.\n\n> Is there any way to achieve that ?\n\nThe reason behind git-daemon not supporting authentication is that\nre-implementing authentication poorly is a bad idea.\n\nIf you need authentication there is SSH that provides authentication\n(for ssh:// protocol), or WebDAV (for HTTP push protocol). Perhaps\nalso future \"smart\" HTTP server would support some kind of\nauthentification...\n\n> I really don't want to give ssh logins for people who I just want to\n> be able to access my repository...\n\nFirst, you can always set git-shell as shell for those git only\naccounts. Second, you can set up Gitosis, which IIRC needs only single\naccount, and handles authentication by itself; I have heard also of\nssh_acl in this context...\n\nI don't know if there is some other equivalent of Gitosis...\n\nHTH\n-- \nJakub Narebski\nPoland\nShadeHawk on #git\n"},{"id":"92907","messageId":"912ec82a0810130109k56e2e976kd00678e2ca3bc558@mail.gmail.com","threadId":"15861","inReplyTo":"m3y70vj8ag.fsf@localhost.localdomain","subject":"Re: User Authentication ?","fromName":"Neshama Parhoti","fromEmail":"pneshama@gmail.com","sentAt":"2008-10-13T08:09:35Z","receivedAt":"2008-10-13T08:09:35Z","isPatch":false,"sender":{"key":"pneshama@gmail.com","avatar":null},"body":"Hi,\n\nOn Sat, Oct 11, 2008 at 8:28 PM, Jakub Narebski <jnareb@gmail.com> wrote:\n> \"Neshama Parhoti\" <pneshama@gmail.com> writes:\n>\n>> I want to setup a git server on the web but I need user\n>> authentication.\n>> I really don't want to give ssh logins for people who I just want to\n>> be able to access my repository...\n>\n> First, you can always set git-shell as shell for those git only\n> accounts.\n\nThank you ! That should really be good. Any chance you are aware of\ndocumentation\nor further guidance about how to set this up ?\nthanks!\n"},{"id":"92914","messageId":"200810131023.07312.jnareb@gmail.com","threadId":"15861","inReplyTo":"912ec82a0810130109k56e2e976kd00678e2ca3bc558@mail.gmail.com","subject":"Re: User Authentication ?","fromName":"Jakub Narebski","fromEmail":"jnareb@gmail.com","sentAt":"2008-10-13T08:23:06Z","receivedAt":"2008-10-13T08:23:06Z","isPatch":false,"sender":{"key":"jnareb@gmail.com","avatar":"https://avatars.githubusercontent.com/u/2706?v=4"},"body":"Neshama Parhoti wrote:\n\n> On Sat, Oct 11, 2008 at 8:28 PM, Jakub Narebski <jnareb@gmail.com> wrote:\n>> \"Neshama Parhoti\" <pneshama@gmail.com> writes:\n>>\n>>> I want to setup a git server on the web but I need user\n>>> authentication.\n>>> I really don't want to give ssh logins for people who I just want to\n>>> be able to access my repository...\n>>\n>> First, you can always set git-shell as shell for those git only\n>> accounts. [...]\n> \n> Thank you ! That should really be good. Any chance you are aware of\n> documentation or further guidance about how to set this up ?\n\nI have never had the need, but for Gitosis the seminal reference is\nI think\n  \"Hosting Git repositories, The Easy (and Secure) Way\"\n  http://scie.nti.st/2007/11/14/hosting-git-repositories-the-easy-and-secure-way\n\n-- \nJakub Narebski\nPoland\n"}]}