git/list[1] front-page[2] threads[3] people[4] search[5] about
 

RE: Git and Active directory ldap Authentication

From
Randall S. Becker <rsbecker@nexbridge.com>
Date
Apr 28, 2017, 12:52 UTC
Message-ID
<000a01d2c01e$4d9a37b0$e8cea710$@nexbridge.com>
In-Reply-To
<000e01d2c002$2dfa4650$89eed2f0$@esail.es>
On April 28, 2017 5:31 AM  Miguel Angel Soriano Morales wrote:
> I would like use git in my Company. We use Active directory for
everything, but I prefer install git in ?
> centos7. I Would like authenticate all my user in Git through Active
Directory. And Every Project had
> ACL permissions .It this possible?

The first thing to remember is that local clones will usually be secured to the user who did the clone and are not usually subject to enterprise security rules or ACLs. Security is usually applied when interacting with an upstream repository from where you clone and push changes and authentication is important at that time.

This might help:
https://technet.microsoft.com/en-us/library/2008.12.linux.aspx

This discusses SSO for Linux. You should already be covered for Windows. However please give details on where your upstream repository is and what server which is likely where you have to authenticate. Typically authentication to upstream repositories is done through SSH - see git push.

There are discussions of integrating SSH keys and AD here (and elsewhere): https://social.technet.microsoft.com/Forums/en-US/8aa28e34-2007-49fe-a689-e2 8e19b2757b/is-there-a-way-to-link-ssh-key-in-ad?forum=winserverDS

You should also consider when, in your environment, to use GPG signing to definitively identify who did the change even in their local repository. AD is unlikely to help you there, unless you can use a custom attribute to store and manage a user's GPG key.

Good luck!

Cheers, Randall

Previous: Miguel Angel Soriano Morales
Message 2 of 2 in “Git and Active directory ldap Authentication”
  1. Miguel Angel Soriano MoralesApr 28, 2017
  2. Randall S. BeckerApr 28, 2017

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.