git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: How does gitosis know who the key belongs to

From
Matthieu Moy <matthieu.moy@grenoble-inp.fr>
Date
Sep 24, 2009, 19:26 UTC
Message-ID
<vpqskeckuto.fsf@bauges.imag.fr>
In-Reply-To
<20090924172610.GA31309@book.hvoigt.net>
Heiko Voigt <hvoigt@hvoigt.net> writes:
> On Thu, Sep 24, 2009 at 03:51:44PM +0100, Howard Miller wrote:
>> Gitosis obviously uses keypairs but the config file addresses the user
>> by name/host. How does gitosis connect the two together? Is it any
>> more complicated than the user detail at the end of the public key?

The user@host at the end of the public key is mostly a comment. No serious software would use it for authentication, since you can freely edit it without changing the rest of the key.

> Not much different. It uses the command feature of the authorized_keys
> file of ssh to limit access to the 'gitosis-serve' command which is
> given the username from the gitosis.conf as argument.

... the username -> key association being done in gitosis's configuration itself (the key held in keydir/foobar is the one of user foobar).

-- 
Matthieu Moy
http://www-verimag.imag.fr/~moy/
Previous: Heiko VoigtNext: Howard Miller
Message 3 of 9 in “How does gitosis know who the key belongs to”
  1. Howard MillerSep 24, 2009
  2. Heiko VoigtSep 24, 2009
  3. Matthieu MoySep 24, 2009
  4. Howard MillerSep 25, 2009
  5. Howard MillerSep 25, 2009
  6. Matthieu MoySep 25, 2009
  7. Howard MillerSep 25, 2009
  8. Heiko VoigtSep 25, 2009
  9. Sitaram ChamartySep 25, 2009

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.