git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: [PATCH] http: http.emptyauth should allow empty (not just NULL) usernames

From
Junio C Hamano <gitster@pobox.com>
Date
Oct 3, 2016, 22:54 UTC
Message-ID
<xmqqk2dp3uyf.fsf@gitster.mtv.corp.google.com>
In-Reply-To
<b7e31e9b13494f94b5bd6fff5fc55af0@exmbdft7.ad.twosigma.com>
David Turner <David.Turner@twosigma.com> writes:
Show 27 quoted lines
>> > > I dunno. The code path you are changing _only_ affects anything if
>> > > the http.emptyauth config is set. But I guess I just don't
>> > > understand why you would say "http://@gitserver" in the first place.
>> Is that a common thing?
>> >
>> > I have no idea if it is common.  I know that we do it.
>> 
>> I guess my question is: _why_ do you do it? Or more specifically, does
>> http://gitserver.example.com" with http.emptyauth not work, and why?
>> 
>> From your response, I _think_ the answer is "no, it doesn't, and I have no
>> clue why".
>
> That was true historically. 
>
> I just tried our old version of git 2.8 (that is, before this patch, and before the libcurl upgrade), and http://gitserver.example.com *does* seem to work with http.emptyauth (and does not work without).  However, http://@gitserver.example.com does *not* work with http.emptyauth, and *does* work without.
>
> After the libcurl upgrade, but before this patch, http://@gitserver.example.com does *not* work with http.emptyauth, while http://gitserver.example.com does.
>
> And finally, after the upgrade and with this patch, both urls work.
>
>> So I dunno. It is annoying not to know what is actually going on, but I'm
>> OK with it if we don't think there's a high chance of regressing any other
>> workflows (which I guess not, because http.emptyauth seems to be a
>> Kerberos-specific hack in the first place).
>
> Yes, I think this is all Kerberos-only.

Now, perhaps with these back-and-forth, hopefully you have enough material to update the proposed log message to clarify so that next Peff won't have to ask "would it be common? why would you do so?"

Thanks.
Previous: David TurnerNext: brian m. carlson
Message 6 of 7 in “http: http.emptyauth should allow empty (not just NULL) usernames”
  1. http: http.emptyauth should allow empty (not just NULL) usernamesDavid Turner, Oct 3, 2016
  2. Jeff KingOct 3, 2016
  3. David TurnerOct 3, 2016
  4. Jeff KingOct 3, 2016
  5. David TurnerOct 3, 2016
  6. Junio C HamanoOct 3, 2016
  7. brian m. carlsonOct 4, 2016

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.