{"thread":{"id":"25827","subject":"How to do with access control per repo with a smart http git server?","startedAt":"2010-11-24T03:10:27Z","lastAt":"2010-11-29T08:44:20Z","messageCount":9,"participants":["Chunlin Zhang","Ilari Liusvaara","Sverre Rabbelier"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"156464","messageId":"loom.20101124T035911-773@post.gmane.org","threadId":"25827","inReplyTo":null,"subject":"How to do with access control per repo with a smart http git server?","fromName":"Chunlin Zhang","fromEmail":"zhangchunlin@gmail.com","sentAt":"2010-11-24T03:10:27Z","receivedAt":"2010-11-24T03:10:27Z","isPatch":false,"sender":{"key":"zhangchunlin@gmail.com","avatar":"https://gravatar.com/avatar/3767134496b3344f758bafc6cf8b5be08e212193fcaaff9dc819b732b5a0c476?d=mp&s=160"},"body":"I setup a smart http git server with apache(\nhttp://progit.org/2010/03/04/smart-http.html ),and I do the authentication with\nSSPI,but how can I do with access control per repo?\n\nIn mercurial,I can do it in .hg/hgrc to configure the users who can read or\nwrite this repo.I seems that .git/config does not have this type of config.\n\nDoes somebody know it?\n\nThanks!\n"},{"id":"156466","messageId":"20101124045025.GA12399@LK-Perkele-V2.elisa-laajakaista.fi","threadId":"25827","inReplyTo":"loom.20101124T035911-773@post.gmane.org","subject":"Re: How to do with access control per repo with a smart http git server?","fromName":"Ilari Liusvaara","fromEmail":"ilari.liusvaara@elisanet.fi","sentAt":"2010-11-24T04:50:25Z","receivedAt":"2010-11-24T04:50:25Z","isPatch":false,"sender":{"key":"ilari.liusvaara@elisanet.fi","avatar":null},"body":"On Wed, Nov 24, 2010 at 03:10:27AM +0000, Chunlin Zhang wrote:\n> I setup a smart http git server with apache(\n> http://progit.org/2010/03/04/smart-http.html ),and I do the authentication with\n> SSPI,but how can I do with access control per repo?\n> \n> Does somebody know it?\n\nEasiest way to do it is via Gitolite.\n\n-Ilari\n"},{"id":"156467","messageId":"loom.20101124T060650-817@post.gmane.org","threadId":"25827","inReplyTo":"20101124045025.GA12399@LK-Perkele-V2.elisa-laajakaista.fi","subject":"Re: How to do with access control per repo with a smart http git server?","fromName":"Chunlin Zhang","fromEmail":"zhangchunlin@gmail.com","sentAt":"2010-11-24T05:07:46Z","receivedAt":"2010-11-24T05:07:46Z","isPatch":false,"sender":{"key":"zhangchunlin@gmail.com","avatar":"https://gravatar.com/avatar/3767134496b3344f758bafc6cf8b5be08e212193fcaaff9dc819b732b5a0c476?d=mp&s=160"},"body":"Ilari Liusvaara <ilari.liusvaara <at> elisanet.fi> writes:\n\n> \n> On Wed, Nov 24, 2010 at 03:10:27AM +0000, Chunlin Zhang wrote:\n> > I setup a smart http git server with apache(\n> > http://progit.org/2010/03/04/smart-http.html ),and I do the authentication with\n> > SSPI,but how can I do with access control per repo?\n> > \n> > Does somebody know it?\n> \n> Easiest way to do it is via Gitolite.\n\nI notice that:\"gitolite depends heavily on ssh pubkey (passwordless) access\" (\nhttps://github.com/sitaramc/gitolite/blob/pu/doc/1-INSTALL.mkd )\n\n> \n> -Ilari\n> \n"},{"id":"156469","messageId":"20101124060813.GA12949@LK-Perkele-V2.elisa-laajakaista.fi","threadId":"25827","inReplyTo":"loom.20101124T060650-817@post.gmane.org","subject":"Re: How to do with access control per repo with a smart http git server?","fromName":"Ilari Liusvaara","fromEmail":"ilari.liusvaara@elisanet.fi","sentAt":"2010-11-24T06:08:13Z","receivedAt":"2010-11-24T06:08:13Z","isPatch":false,"sender":{"key":"ilari.liusvaara@elisanet.fi","avatar":null},"body":"On Wed, Nov 24, 2010 at 05:07:46AM +0000, Chunlin Zhang wrote:\n> Ilari Liusvaara <ilari.liusvaara <at> elisanet.fi> writes:\n> \n> > Easiest way to do it is via Gitolite.\n> \n> I notice that:\"gitolite depends heavily on ssh pubkey (passwordless) access\" (\n> https://github.com/sitaramc/gitolite/blob/pu/doc/1-INSTALL.mkd )\n \nSee http://github.com/sitaramc/gitolite/blob/pu/doc/http-backend.mkd\n\n-Ilari\n"},{"id":"156471","messageId":"loom.20101124T082340-444@post.gmane.org","threadId":"25827","inReplyTo":"20101124060813.GA12949@LK-Perkele-V2.elisa-laajakaista.fi","subject":"Re: How to do with access control per repo with a smart http git server?","fromName":"Chunlin Zhang","fromEmail":"zhangchunlin@gmail.com","sentAt":"2010-11-24T07:26:41Z","receivedAt":"2010-11-24T07:26:41Z","isPatch":false,"sender":{"key":"zhangchunlin@gmail.com","avatar":"https://gravatar.com/avatar/3767134496b3344f758bafc6cf8b5be08e212193fcaaff9dc819b732b5a0c476?d=mp&s=160"},"body":"Ilari Liusvaara <ilari.liusvaara <at> elisanet.fi> writes:\n\n> \n> On Wed, Nov 24, 2010 at 05:07:46AM +0000, Chunlin Zhang wrote:\n\n> \n> See http://github.com/sitaramc/gitolite/blob/pu/doc/http-backend.mkd\n\nThank you.I have read this,but I forgot to say that I am using a win32 server,\nit seems that it is not supported.\n\nI am trying to write some python script to do access control work using apache\nmod_wsgi now.\n\n> \n> -Ilari\n> \n"},{"id":"156477","messageId":"loom.20101124T110708-253@post.gmane.org","threadId":"25827","inReplyTo":"loom.20101124T082340-444@post.gmane.org","subject":"Re: How to do with access control per repo with a smart http git server?","fromName":"Chunlin Zhang","fromEmail":"zhangchunlin@gmail.com","sentAt":"2010-11-24T10:13:28Z","receivedAt":"2010-11-24T10:13:28Z","isPatch":false,"sender":{"key":"zhangchunlin@gmail.com","avatar":"https://gravatar.com/avatar/3767134496b3344f758bafc6cf8b5be08e212193fcaaff9dc819b732b5a0c476?d=mp&s=160"},"body":"Chunlin Zhang <zhangchunlin <at> gmail.com> writes:\n\n> I am trying to write some python script to do access control work using apache\n> mod_wsgi now.\n\nI have just finished some python scripts working in apache+mod_wsgi\nenvironment,authentication part using ldap(in my win32 server case I use to auth\nwith Active Directory server),and configure the acl using a acl file just like\nthe file svn use(\nhttp://svnbook.red-bean.com/en/1.4/svn.serverconfig.pathbasedauthz.html ),but\nnot Path-Based,just repo-based.\n\nIf it is useful to someone else,can email me and I will share it.\n\n> \n"},{"id":"156572","messageId":"AANLkTi=1borEXoxZHKRQfPVhuLenp1mOQ7dezFCyKXQi@mail.gmail.com","threadId":"25827","inReplyTo":"loom.20101124T110708-253@post.gmane.org","subject":"Re: How to do with access control per repo with a smart http git server?","fromName":"Sverre Rabbelier","fromEmail":"srabbelier@gmail.com","sentAt":"2010-11-25T22:35:11Z","receivedAt":"2010-11-25T22:35:11Z","isPatch":false,"sender":{"key":"srabbelier@gmail.com","avatar":"https://avatars.githubusercontent.com/u/3098?v=4"},"body":"Heya,\n\nOn Wed, Nov 24, 2010 at 11:13, Chunlin Zhang <zhangchunlin@gmail.com> wrote:\n> If it is useful to someone else,can email me and I will share it.\n\nThree years down the road someone will read this message on vger, have\ntheir mail to you bounce, and curse their luck. Why not just put it up\non github or so, link to it here, and if someone finds a use to it at\nsome point, all the merrier?\n\n-- \nCheers,\n\nSverre Rabbelier\n"},{"id":"156625","messageId":"icoa0u$om4$1@dough.gmane.org","threadId":"25827","inReplyTo":"AANLkTi=1borEXoxZHKRQfPVhuLenp1mOQ7dezFCyKXQi@mail.gmail.com","subject":"Re: How to do with access control per repo with a smart http git server?","fromName":"Chunlin Zhang","fromEmail":"zhangchunlin@gmail.com","sentAt":"2010-11-26T12:43:08Z","receivedAt":"2010-11-26T12:43:08Z","isPatch":false,"sender":{"key":"zhangchunlin@gmail.com","avatar":"https://gravatar.com/avatar/3767134496b3344f758bafc6cf8b5be08e212193fcaaff9dc819b732b5a0c476?d=mp&s=160"},"body":"于 2010年11月26日 06:35, Sverre Rabbelier 写道:\n> Heya,\n>\n> On Wed, Nov 24, 2010 at 11:13, Chunlin Zhang<zhangchunlin@gmail.com>  wrote:\n>> If it is useful to someone else,can email me and I will share it.\n>\n> Three years down the road someone will read this message on vger, have\n> their mail to you bounce, and curse their luck. Why not just put it up\n> on github or so, link to it here, and if someone finds a use to it at\n> some point, all the merrier?\nOk,I will put it on github.But after some modification,because the \ncurrent version is quick and dirty.\n>\n"},{"id":"156791","messageId":"loom.20101129T094053-2@post.gmane.org","threadId":"25827","inReplyTo":"icoa0u$om4$1@dough.gmane.org","subject":"Re: How to do with access control per repo with a smart http git server?","fromName":"Chunlin Zhang","fromEmail":"zhangchunlin@gmail.com","sentAt":"2010-11-29T08:44:20Z","receivedAt":"2010-11-29T08:44:20Z","isPatch":false,"sender":{"key":"zhangchunlin@gmail.com","avatar":"https://gravatar.com/avatar/3767134496b3344f758bafc6cf8b5be08e212193fcaaff9dc819b732b5a0c476?d=mp&s=160"},"body":"Chunlin Zhang <zhangchunlin <at> gmail.com> writes:\n \n> 于 2010年11月26日 06:35, Sverre Rabbelier 写道:\n> > Heya,\n\n> Ok,I will put it on github.But after some modification,because the \n> current version is quick and dirty.\n\nI have put my code to here: https://github.com/zhangchunlin/gitldapacl\n"}]}