threads / discuss / 25827

How to do with access control per repo with a smart http git server?

Subject: How to do with access control per repo with a smart http git server?

## tl;dr

9 messages between Nov 24, 2010 and Nov 29, 2010.

replies: 8people: 3as markdown or json

Chunlin Zhang· Nov 24, 2010, 03:10 UTC · lore

I setup a smart http git server with apache( http://progit.org/2010/03/04/smart-http.html ),and I do the authentication with SSPI,but how can I do with access control per repo?

In mercurial,I can do it in .hg/hgrc to configure the users who can read or write this repo.I seems that .git/config does not have this type of config.

Does somebody know it?
Thanks!
Ilari Liusvaara· Nov 24, 2010, 04:50 UTC · re: Chunlin Zhang · lore

Re: How to do with access control per repo with a smart http git server?

On Wed, Nov 24, 2010 at 03:10:27AM +0000, Chunlin Zhang wrote:
Show 5 quoted lines
> I setup a smart http git server with apache(
> http://progit.org/2010/03/04/smart-http.html ),and I do the authentication with
> SSPI,but how can I do with access control per repo?
> 
> Does somebody know it?
Easiest way to do it is via Gitolite.
-Ilari
Chunlin Zhang· Nov 24, 2010, 05:07 UTC · re: Ilari Liusvaara · lore

Re: How to do with access control per repo with a smart http git server?

Ilari Liusvaara <ilari.liusvaara <at> elisanet.fi> writes:
Show 9 quoted lines
> 
> On Wed, Nov 24, 2010 at 03:10:27AM +0000, Chunlin Zhang wrote:
> > I setup a smart http git server with apache(
> > http://progit.org/2010/03/04/smart-http.html ),and I do the authentication with
> > SSPI,but how can I do with access control per repo?
> > 
> > Does somebody know it?
> 
> Easiest way to do it is via Gitolite.

I notice that:"gitolite depends heavily on ssh pubkey (passwordless) access" ( https://github.com/sitaramc/gitolite/blob/pu/doc/1-INSTALL.mkd )

> 
> -Ilari
> 
Ilari Liusvaara· Nov 24, 2010, 06:08 UTC · re: Chunlin Zhang · lore

Re: How to do with access control per repo with a smart http git server?

On Wed, Nov 24, 2010 at 05:07:46AM +0000, Chunlin Zhang wrote:
Show 6 quoted lines
> Ilari Liusvaara <ilari.liusvaara <at> elisanet.fi> writes:
> 
> > Easiest way to do it is via Gitolite.
> 
> I notice that:"gitolite depends heavily on ssh pubkey (passwordless) access" (
> https://github.com/sitaramc/gitolite/blob/pu/doc/1-INSTALL.mkd )
 
See http://github.com/sitaramc/gitolite/blob/pu/doc/http-backend.mkd
-Ilari
Chunlin Zhang· Nov 24, 2010, 07:26 UTC · re: Ilari Liusvaara · lore

Re: How to do with access control per repo with a smart http git server?

Ilari Liusvaara <ilari.liusvaara <at> elisanet.fi> writes:
> 
> On Wed, Nov 24, 2010 at 05:07:46AM +0000, Chunlin Zhang wrote:
> 
> See http://github.com/sitaramc/gitolite/blob/pu/doc/http-backend.mkd

Thank you.I have read this,but I forgot to say that I am using a win32 server, it seems that it is not supported.

I am trying to write some python script to do access control work using apache mod_wsgi now.

> 
> -Ilari
> 
Chunlin Zhang· Nov 24, 2010, 10:13 UTC · re: Chunlin Zhang · lore

Re: How to do with access control per repo with a smart http git server?

Chunlin Zhang <zhangchunlin <at> gmail.com> writes:
> I am trying to write some python script to do access control work using apache
> mod_wsgi now.

I have just finished some python scripts working in apache+mod_wsgi environment,authentication part using ldap(in my win32 server case I use to auth with Active Directory server),and configure the acl using a acl file just like the file svn use( http://svnbook.red-bean.com/en/1.4/svn.serverconfig.pathbasedauthz.html ),but not Path-Based,just repo-based.

If it is useful to someone else,can email me and I will share it.
> 
Sverre Rabbelier· Nov 25, 2010, 22:35 UTC · re: Chunlin Zhang · lore

Re: How to do with access control per repo with a smart http git server?

Heya,
On Wed, Nov 24, 2010 at 11:13, Chunlin Zhang <zhangchunlin@gmail.com> wrote:
> If it is useful to someone else,can email me and I will share it.

Three years down the road someone will read this message on vger, have their mail to you bounce, and curse their luck. Why not just put it up on github or so, link to it here, and if someone finds a use to it at some point, all the merrier?

-- 
Cheers,

Sverre Rabbelier
Chunlin Zhang· Nov 26, 2010, 12:43 UTC · re: Sverre Rabbelier · lore

Re: How to do with access control per repo with a smart http git server?

于 2010年11月26日 06:35, Sverre Rabbelier 写道:
Show 9 quoted lines
> Heya,
>
> On Wed, Nov 24, 2010 at 11:13, Chunlin Zhang<zhangchunlin@gmail.com>  wrote:
>> If it is useful to someone else,can email me and I will share it.
>
> Three years down the road someone will read this message on vger, have
> their mail to you bounce, and curse their luck. Why not just put it up
> on github or so, link to it here, and if someone finds a use to it at
> some point, all the merrier?

Ok,I will put it on github.But after some modification,because the current version is quick and dirty.

>
Chunlin Zhang· Nov 29, 2010, 08:44 UTC · re: Chunlin Zhang · lore

Re: How to do with access control per repo with a smart http git server?

Chunlin Zhang <zhangchunlin <at> gmail.com> writes:
 
> 于 2010年11月26日 06:35, Sverre Rabbelier 写道:
> > Heya,
> Ok,I will put it on github.But after some modification,because the 
> current version is quick and dirty.
I have put my code to here: https://github.com/zhangchunlin/gitldapacl

← back to recent threads