threads / discuss / 15861

User Authentication ?

Subject: User Authentication ?

## tl;dr

4 messages between Oct 11, 2008 and Oct 13, 2008.

replies: 3people: 2as markdown or json

Neshama Parhoti· Oct 11, 2008, 16:41 UTC · lore

Hi All,

I want to setup a git server on the web but I need user authentication.

>From what I understand, currently git-daemon does not support authentication.

Is there any way to achieve that ?

I really don't want to give ssh logins for people who I just want to be able to access my repository...

Thank you, Pnesh.

Jakub Narebski· Oct 11, 2008, 18:28 UTC · re: Neshama Parhoti · lore

Re: User Authentication ?

"Neshama Parhoti" <pneshama@gmail.com> writes:

Show 5 quoted lines

> I want to setup a git server on the web but I need user
> authentication.
> 
> From what I understand, currently git-daemon does not support
> authentication.

The purpose of git-daemon is to allow fast (and bandwidth-saving) anonymous read-only (fetch) access to git repositories. The ability to push via git-daemon was added later, and is turned off by default because it should be used only in special situation.

> Is there any way to achieve that ?

The reason behind git-daemon not supporting authentication is that re-implementing authentication poorly is a bad idea.

If you need authentication there is SSH that provides authentication (for ssh:// protocol), or WebDAV (for HTTP push protocol). Perhaps also future "smart" HTTP server would support some kind of authentification...

> I really don't want to give ssh logins for people who I just want to
> be able to access my repository...

First, you can always set git-shell as shell for those git only accounts. Second, you can set up Gitosis, which IIRC needs only single account, and handles authentication by itself; I have heard also of ssh_acl in this context...

I don't know if there is some other equivalent of Gitosis...

HTH

-- 
Jakub Narebski
Poland
ShadeHawk on #git

Neshama Parhoti· Oct 13, 2008, 08:09 UTC · re: Jakub Narebski · lore

Re: User Authentication ?

Hi,

On Sat, Oct 11, 2008 at 8:28 PM, Jakub Narebski <jnareb@gmail.com> wrote:

Show 9 quoted lines

> "Neshama Parhoti" <pneshama@gmail.com> writes:
>
>> I want to setup a git server on the web but I need user
>> authentication.
>> I really don't want to give ssh logins for people who I just want to
>> be able to access my repository...
>
> First, you can always set git-shell as shell for those git only
> accounts.

Thank you ! That should really be good. Any chance you are aware of documentation or further guidance about how to set this up ? thanks!

Jakub Narebski· Oct 13, 2008, 08:23 UTC · re: Neshama Parhoti · lore

Re: User Authentication ?

Neshama Parhoti wrote:

Show 13 quoted lines

> On Sat, Oct 11, 2008 at 8:28 PM, Jakub Narebski <jnareb@gmail.com> wrote:
>> "Neshama Parhoti" <pneshama@gmail.com> writes:
>>
>>> I want to setup a git server on the web but I need user
>>> authentication.
>>> I really don't want to give ssh logins for people who I just want to
>>> be able to access my repository...
>>
>> First, you can always set git-shell as shell for those git only
>> accounts. [...]
> 
> Thank you ! That should really be good. Any chance you are aware of
> documentation or further guidance about how to set this up ?

I have never had the need, but for Gitosis the seminal reference is
I think
  "Hosting Git repositories, The Easy (and Secure) Way"
  http://scie.nti.st/2007/11/14/hosting-git-repositories-the-easy-and-secure-way

-- 
Jakub Narebski
Poland