From: Matthew John Cheetham Date: Thu, 30 Apr 2026 10:53:36 GMT Subject: Re: [PATCH 2/3] http: attempt Negotiate auth in http.emptyAuth=auto mode Message-ID: In-Reply-To: [re-cc:ing the accidentially dropped mailing list] On 2026-04-30 01:12, Junio C Hamano wrote: > Matthew John Cheetham writes: > >> Agreed - the existing description is pretty opaque about what values it >> actually takes. Should I add another patch to this series to spell out >> the three values explicitly? How about something like this: >> >> http.emptyAuth:: >> Attempt authentication without seeking a username or >> password. This can be used to attempt GSS-Negotiate >> authentication without specifying a username in the URL, >> as libcurl normally requires a username for >> authentication. Possible values are: >> + >> -- >> * `auto` (default) - Send empty credentials only if the server's >> 401 response advertises an authentication mechanism that >> requires them (such as GSS-Negotiate); otherwise fall back to >> prompting via the credential helper. >> * `true` - Always send empty credentials on the very first >> request, before receiving any 401 response from the server. >> * `false` - Never send empty credentials. Mechanisms that >> require empty credentials, such as GSS-Negotiate, will not >> work. >> -- >> >> Does that read better? > > Surely. Thanks. Submitted as v2 Thanks, Matthew