git/list[1] front-page[2] threads[3] people[4] search[5] about
 

RE: How do you script linux GIT client to pass kerberos credential to apache enabled GIT server?

From
Randall S. Becker <rsbecker@nexbridge.com>
Date
Apr 3, 2017, 16:20 UTC
Message-ID
<002501d2ac96$42a272a0$c7e757e0$@nexbridge.com>
In-Reply-To
<CAAqgmoP2uyd5_k-JDOBpBV8ay6BueUvKkwcWAZ_C1n4=4xpECg@mail.gmail.com>

-----Original Message----- On April 3, 2017 12:04 PM, Ken Edward Wrote:

>I have my git repositories behind an apache server configured with kerberos. Works fine if the user is logged in on their workstation.
>Apache gets the kerberos credential, and validates, and  then sends the GIT repo being requested.
>BUT, I want to write a script on linux that will also pass the kerberos credential to the apache GIT server without having any manually intervention. Seems I would create a kerberos keytab for the principal and then use that to >authenticate.... kinit supports authenticating from a keytab using the -k -t <keytab-path> options, but has anyone done this?

Have you attempted prototyping this using curl? It might be able to help out a bit. I have done this in the past with Stash and their REST and credentials, but not using Kerberos. Just a thought. Cheers,

Randall
Previous: ken edwardNext: Mantas Mikulėnas
Message 2 of 3 in “How do you script linux GIT client to pass kerberos credential to apache enabled GIT server?”
  1. ken edwardApr 3, 2017
  2. Randall S. BeckerApr 3, 2017
  3. Mantas MikulėnasApr 4, 2017

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.