# How to do with access control per repo with a smart http git server?

9 messages from 2010-11-24 to 2010-11-29. Participants: Chunlin Zhang, Ilari Liusvaara, Sverre Rabbelier.
Thread: https://gitlist.dev/t/25827

## Chunlin Zhang, 2010-11-24 03:10

Subject: How to do with access control per repo with a smart http git server?
Message-ID: <loom.20101124T035911-773@post.gmane.org>
URL: https://gitlist.dev/e/loom.20101124T035911-773%40post.gmane.org

```
I setup a smart http git server with apache(
http://progit.org/2010/03/04/smart-http.html ),and I do the authentication with
SSPI,but how can I do with access control per repo?

In mercurial,I can do it in .hg/hgrc to configure the users who can read or
write this repo.I seems that .git/config does not have this type of config.

Does somebody know it?

Thanks!

```

## Ilari Liusvaara, 2010-11-24 04:50

Subject: Re: How to do with access control per repo with a smart http git server?
Message-ID: <20101124045025.GA12399@LK-Perkele-V2.elisa-laajakaista.fi>
URL: https://gitlist.dev/e/20101124045025.GA12399%40LK-Perkele-V2.elisa-laajakaista.fi
In-Reply-To: <loom.20101124T035911-773@post.gmane.org>

```
On Wed, Nov 24, 2010 at 03:10:27AM +0000, Chunlin Zhang wrote:
> I setup a smart http git server with apache(
> http://progit.org/2010/03/04/smart-http.html ),and I do the authentication with
> SSPI,but how can I do with access control per repo?
> 
> Does somebody know it?

Easiest way to do it is via Gitolite.

-Ilari

```

## Chunlin Zhang, 2010-11-24 05:07

Subject: Re: How to do with access control per repo with a smart http git server?
Message-ID: <loom.20101124T060650-817@post.gmane.org>
URL: https://gitlist.dev/e/loom.20101124T060650-817%40post.gmane.org
In-Reply-To: <20101124045025.GA12399@LK-Perkele-V2.elisa-laajakaista.fi>

```
Ilari Liusvaara <ilari.liusvaara <at> elisanet.fi> writes:

> 
> On Wed, Nov 24, 2010 at 03:10:27AM +0000, Chunlin Zhang wrote:
> > I setup a smart http git server with apache(
> > http://progit.org/2010/03/04/smart-http.html ),and I do the authentication with
> > SSPI,but how can I do with access control per repo?
> > 
> > Does somebody know it?
> 
> Easiest way to do it is via Gitolite.

I notice that:"gitolite depends heavily on ssh pubkey (passwordless) access" (
https://github.com/sitaramc/gitolite/blob/pu/doc/1-INSTALL.mkd )

> 
> -Ilari
> 

```

## Ilari Liusvaara, 2010-11-24 06:08

Subject: Re: How to do with access control per repo with a smart http git server?
Message-ID: <20101124060813.GA12949@LK-Perkele-V2.elisa-laajakaista.fi>
URL: https://gitlist.dev/e/20101124060813.GA12949%40LK-Perkele-V2.elisa-laajakaista.fi
In-Reply-To: <loom.20101124T060650-817@post.gmane.org>

```
On Wed, Nov 24, 2010 at 05:07:46AM +0000, Chunlin Zhang wrote:
> Ilari Liusvaara <ilari.liusvaara <at> elisanet.fi> writes:
> 
> > Easiest way to do it is via Gitolite.
> 
> I notice that:"gitolite depends heavily on ssh pubkey (passwordless) access" (
> https://github.com/sitaramc/gitolite/blob/pu/doc/1-INSTALL.mkd )
 
See http://github.com/sitaramc/gitolite/blob/pu/doc/http-backend.mkd

-Ilari

```

## Chunlin Zhang, 2010-11-24 07:26

Subject: Re: How to do with access control per repo with a smart http git server?
Message-ID: <loom.20101124T082340-444@post.gmane.org>
URL: https://gitlist.dev/e/loom.20101124T082340-444%40post.gmane.org
In-Reply-To: <20101124060813.GA12949@LK-Perkele-V2.elisa-laajakaista.fi>

```
Ilari Liusvaara <ilari.liusvaara <at> elisanet.fi> writes:

> 
> On Wed, Nov 24, 2010 at 05:07:46AM +0000, Chunlin Zhang wrote:

> 
> See http://github.com/sitaramc/gitolite/blob/pu/doc/http-backend.mkd

Thank you.I have read this,but I forgot to say that I am using a win32 server,
it seems that it is not supported.

I am trying to write some python script to do access control work using apache
mod_wsgi now.

> 
> -Ilari
> 

```

## Chunlin Zhang, 2010-11-24 10:13

Subject: Re: How to do with access control per repo with a smart http git server?
Message-ID: <loom.20101124T110708-253@post.gmane.org>
URL: https://gitlist.dev/e/loom.20101124T110708-253%40post.gmane.org
In-Reply-To: <loom.20101124T082340-444@post.gmane.org>

```
Chunlin Zhang <zhangchunlin <at> gmail.com> writes:

> I am trying to write some python script to do access control work using apache
> mod_wsgi now.

I have just finished some python scripts working in apache+mod_wsgi
environment,authentication part using ldap(in my win32 server case I use to auth
with Active Directory server),and configure the acl using a acl file just like
the file svn use(
http://svnbook.red-bean.com/en/1.4/svn.serverconfig.pathbasedauthz.html ),but
not Path-Based,just repo-based.

If it is useful to someone else,can email me and I will share it.

> 

```

## Sverre Rabbelier, 2010-11-25 22:35

Subject: Re: How to do with access control per repo with a smart http git server?
Message-ID: <AANLkTi=1borEXoxZHKRQfPVhuLenp1mOQ7dezFCyKXQi@mail.gmail.com>
URL: https://gitlist.dev/e/AANLkTi%3D1borEXoxZHKRQfPVhuLenp1mOQ7dezFCyKXQi%40mail.gmail.com
In-Reply-To: <loom.20101124T110708-253@post.gmane.org>

```
Heya,

On Wed, Nov 24, 2010 at 11:13, Chunlin Zhang <zhangchunlin@gmail.com> wrote:
> If it is useful to someone else,can email me and I will share it.

Three years down the road someone will read this message on vger, have
their mail to you bounce, and curse their luck. Why not just put it up
on github or so, link to it here, and if someone finds a use to it at
some point, all the merrier?

-- 
Cheers,

Sverre Rabbelier

```

## Chunlin Zhang, 2010-11-26 12:43

Subject: Re: How to do with access control per repo with a smart http git server?
Message-ID: <icoa0u$om4$1@dough.gmane.org>
URL: https://gitlist.dev/e/icoa0u%24om4%241%40dough.gmane.org
In-Reply-To: <AANLkTi=1borEXoxZHKRQfPVhuLenp1mOQ7dezFCyKXQi@mail.gmail.com>

```
于 2010年11月26日 06:35, Sverre Rabbelier 写道:
> Heya,
>
> On Wed, Nov 24, 2010 at 11:13, Chunlin Zhang<zhangchunlin@gmail.com>  wrote:
>> If it is useful to someone else,can email me and I will share it.
>
> Three years down the road someone will read this message on vger, have
> their mail to you bounce, and curse their luck. Why not just put it up
> on github or so, link to it here, and if someone finds a use to it at
> some point, all the merrier?
Ok,I will put it on github.But after some modification,because the 
current version is quick and dirty.
>

```

## Chunlin Zhang, 2010-11-29 08:44

Subject: Re: How to do with access control per repo with a smart http git server?
Message-ID: <loom.20101129T094053-2@post.gmane.org>
URL: https://gitlist.dev/e/loom.20101129T094053-2%40post.gmane.org
In-Reply-To: <icoa0u$om4$1@dough.gmane.org>

```
Chunlin Zhang <zhangchunlin <at> gmail.com> writes:
 
> 于 2010年11月26日 06:35, Sverre Rabbelier 写道:
> > Heya,

> Ok,I will put it on github.But after some modification,because the 
> current version is quick and dirty.

I have put my code to here: https://github.com/zhangchunlin/gitldapacl

```