{"thread":{"id":"45825","subject":"Git and Active directory ldap Authentication","startedAt":"2017-04-28T09:32:35Z","lastAt":"2017-04-28T12:52:52Z","messageCount":2,"participants":["Miguel Angel Soriano Morales","Randall S. Becker"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"318132","messageId":"000e01d2c002$2dfa4650$89eed2f0$@esail.es","threadId":"45825","inReplyTo":null,"subject":"Git and Active directory ldap Authentication","fromName":"Miguel Angel Soriano Morales","fromEmail":"miguelangel.soriano@esail.es","sentAt":"2017-04-28T09:31:07Z","receivedAt":"2017-04-28T09:32:35Z","isPatch":false,"sender":{"key":"miguelangel.soriano@esail.es","avatar":null},"body":"Hi,\n\nSorry for my English and Thanks for assisting me. I would like use git in my\nCompany. We use Active directory for everything, but I prefer install git in\ncentos7. I Would like authenticate all my user in Git through Active\nDirectory. And Every Project had ACL permissions .It this posible? Can you\nhelp me?\n\nThanks a lot and good weekend\n\n\n\n\n"},{"id":"318149","messageId":"000a01d2c01e$4d9a37b0$e8cea710$@nexbridge.com","threadId":"45825","inReplyTo":"000e01d2c002$2dfa4650$89eed2f0$@esail.es","subject":"RE: Git and Active directory ldap Authentication","fromName":"Randall S. Becker","fromEmail":"rsbecker@nexbridge.com","sentAt":"2017-04-28T12:52:25Z","receivedAt":"2017-04-28T12:52:52Z","isPatch":false,"sender":{"key":"randall.becker@nexbridge.ca","avatar":"https://avatars.githubusercontent.com/u/28956764?v=4"},"body":"On April 28, 2017 5:31 AM  Miguel Angel Soriano Morales wrote:\n> I would like use git in my Company. We use Active directory for\neverything, but I prefer install git in ?\n> centos7. I Would like authenticate all my user in Git through Active\nDirectory. And Every Project had\n> ACL permissions .It this possible?\n\nThe first thing to remember is that local clones will usually be secured to\nthe user who did the clone and are not usually subject to enterprise\nsecurity rules or ACLs. Security is usually applied when interacting with an\nupstream repository from where you clone and push changes and authentication\nis important at that time.\n\nThis might help:\n\nhttps://technet.microsoft.com/en-us/library/2008.12.linux.aspx\n\nThis discusses SSO for Linux. You should already be covered for Windows.\nHowever please give details on where your upstream repository is and what\nserver which is likely where you have to authenticate. Typically\nauthentication to upstream repositories is done through SSH - see git push. \n\nThere are discussions of integrating SSH keys and AD here (and elsewhere):\nhttps://social.technet.microsoft.com/Forums/en-US/8aa28e34-2007-49fe-a689-e2\n8e19b2757b/is-there-a-way-to-link-ssh-key-in-ad?forum=winserverDS\n\nYou should also consider when, in your environment, to use GPG signing to\ndefinitively identify who did the change even in their local repository. AD\nis unlikely to help you there, unless you can use a custom attribute to\nstore and manage a user's GPG key.\n\nGood luck!\n\nCheers,\nRandall\n\n\n"}]}