git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: Restricted git push ?

From
JBJ. Bakshi <joydeep@infoservices.in>
Date
Jul 19, 2011, 10:45 UTC
Message-ID
<20110719161529.47268b52@shiva.selfip.org>
In-Reply-To
<20110719160311.10f2364d@shiva.selfip.org>

On Tue, 19 Jul 2011 16:03:11 +0530 "J. Bakshi" <joydeep@infoservices.in> wrote:

Show 46 quoted lines
> On Tue, 19 Jul 2011 15:35:42 +0530
> Sitaram Chamarty <sitaramc@gmail.com> wrote:
> 
> > On Tue, Jul 19, 2011 at 3:06 PM, J. Bakshi <joydeep@infoservices.in> wrote:
> > > Hello list,
> > >
> > > I have installed git repo based on http://  protocol and both read+write access is based on a htpasswd based authentication. The git repo is "bare" so that push is possible. But I like to have push from a limited users only, not from all. For the rest, only pull should be possible. Is there any way to achieve this type of ACL ?
> > 
> > man git-http-backend has an example config described thus:  "To enable
> > anonymous read access but authenticated write access...".  It
> > certainly sounds like what you want.
> > 
> > Not sure what sort of http access you have setup 
> 
> I have 
> 
> ``````````
> <Location /git>
> AuthType Basic
> # Message to give to the committer
> AuthName "Write access requires a password"
> # File listing users with write (commit) access
> AuthUserFile /home/svn/PASSWD
> Require valid-user
> </Location>
> ``````````
> 
> So authentication is require forman git-http-backend both read and write. Now to use one more level to restrict push user I have added one more restriction like
> 
> <LocationMatch "^/git/.*/git-receive-pack$">
> AuthType Basic
> # Message to give to the committer
> AuthName "Write access requires a password"
> # File listing users with write (commit) access
> AuthUserFile /home/git/pushACL
> Require valid-user
> </LocationMatch>
> 
> read access is working fine, but write access not. log reports 
> 
> ````````
>  user testuser not found: /git/web.git/info/refs
> ``````````
> 
> Don't know why it is searching at /git/web.git/info/refs !!
> 

OK, seems the write authentication is checked twice. one for the first stanza for read access and second-time for the 2nd stanza the write access. How can I tweak the first stanza only for read access ?

Previous: J. BakshiNext: J. Bakshi
Message 4 of 7 in “Restricted git push ?”
  1. J. BakshiJul 19, 2011
  2. Sitaram ChamartyJul 19, 2011
  3. J. BakshiJul 19, 2011
  4. J. BakshiJul 19, 2011
  5. J. BakshiJul 19, 2011
  6. Sitaram ChamartyJul 19, 2011
  7. J. BakshiJul 19, 2011

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.