git/list[1] front-page[2] threads[3] people[4] search[5] about
 

git smart-http do not authent to allow git ls-remote to be called anonymously

From
乙酸鋰 <ch3cooli@gmail.com>
Date
Sep 30, 2012, 14:35 UTC
Message-ID
<CAHtLG6Q+XO=LhnKw4hhwtOe2ROeDN1Kg=JN5GTQqdvYjk-Sv4g@mail.gmail.com>
Hi,

I use smart-http on Apache. If nothing to be pushed / pulled, I do not want password to be supplied. And allow git ls-remote to run without password

*.git/info/refs?service=git-upload-pack *.git/info/refs?service=git-receive-pack

I only need authentication on

*.git/git-upload-pack *.git/git-receive-pack

/etc/apache/httpd.conf
<LocationMatch "^/git/.*/git-(upload|receive)-pack$">
    AuthType Basic
    AuthName "staff only"
    AuthUserFile /etc/apache/apache.pwd
    Require valid-user
</LocationMatch>
However this does not work. It does not ask for password at all.
I use Ubuntu 10.04, Apache 2.2.14, Git 1.7.11.3.

Directory structure: any depth (more than 1 subdir) of path from /git to .git folders

Could you advise how to configure this? Is this a bug?

Regards, ch3cooli

Next: Shawn Pearce
Message 1 of 7 in “git smart-http do not authent to allow git ls-remote to be called anonymously”
  1. 乙酸鋰Sep 30, 2012
  2. Shawn PearceOct 1, 2012
  3. Jeff KingOct 1, 2012
  4. Jeff KingOct 14, 2012
  5. Jeff KingOct 31, 2012
  6. 1/2 remote-curl: hoist gzip buffer size to top of post_rpcJeff King, Oct 31, 2012
  7. 2/2 remote-curl: retry failed requests for auth even with gzipJeff King, Oct 31, 2012

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.