Re: [PATCH 2/3] http: attempt Negotiate auth in http.emptyAuth=auto mode
- From
Matthew John Cheetham <mjcheetham@outlook.com>
- Date
- Apr 30, 2026, 10:53 UTC
- Message-ID
- <VI0PR03MB1163459D06AB474AD97D29E43C0352@VI0PR03MB11634.eurprd03.prod.outlook.com>
- In-Reply-To
- <xmqqse8dz4pi.fsf@gitster.g>
[re-cc:ing the accidentially dropped mailing list]
On 2026-04-30 01:12, Junio C Hamano wrote:
Show 28 quoted lines
> Matthew John Cheetham <mjcheetham@outlook.com> writes: > >> Agreed - the existing description is pretty opaque about what values it >> actually takes. Should I add another patch to this series to spell out >> the three values explicitly? How about something like this: >> >> http.emptyAuth:: >> Attempt authentication without seeking a username or >> password. This can be used to attempt GSS-Negotiate >> authentication without specifying a username in the URL, >> as libcurl normally requires a username for >> authentication. Possible values are: >> + >> -- >> * `auto` (default) - Send empty credentials only if the server's >> 401 response advertises an authentication mechanism that >> requires them (such as GSS-Negotiate); otherwise fall back to >> prompting via the credential helper. >> * `true` - Always send empty credentials on the very first >> request, before receiving any 401 response from the server. >> * `false` - Never send empty credentials. Mechanisms that >> require empty credentials, such as GSS-Negotiate, will not >> work. >> -- >> >> Does that read better? > > Surely. Thanks.
Submitted as v2
Thanks, Matthew