From: Shawn Pearce <spearce@spearce.org>
Date: Wed, 15 Aug 2012 14:08:35 GMT
Subject: Re: [PATCH] daemon: --access-hook option
Message-ID: <CAJo=hJs7cxs-4MvTovKMzLZ22a1GFPrmANZd0Srny_UKQe+u+w@mail.gmail.com>
In-Reply-To: <7vobmc7n80.fsf_-_@alter.siamese.dyndns.org>

On Tue, Aug 14, 2012 at 10:12 PM, Junio C Hamano <gitster@pobox.com> wrote:
> The --access-hook option to "git daemon" specifies an external
> command to be run every time a client connects, with
>
>  - service name (e.g. "upload-pack", etc.),
>  - path to the repository,
>  - hostname (%H),
>  - canonical hostname (%CH),
>  - ip address (%IP),
>  - tcp port (%P)
>
> as its command line arguments.  The external command can decide to
> decline the service by exiting with a non-zero status (or to allow it
> by exiting with a zero status).  It can also look at the $REMOTE_ADDR
> and $REMOTE_PORT environment variables to learn about the requestor
> when making this decision.
>
> The external command can optionally write a single line to its
> standard output to be sent to the requestor as an error message when
> it declines the service.
>
> Signed-off-by: Junio C Hamano <gitster@pobox.com>

Thanks Junio, this looks like the best approach.

Acked-by: Shawn O. Pearce <spearce@spearce.org>