# link user-name with ssh-login 5 messages from 2012-03-19 to 2012-03-21. Participants: Roberto, Junio C Hamano, Jeff King, Shawn Pearce, Sitaram Chamarty. Thread: https://gitlist.dev/t/29994 ## Roberto, 2012-03-19 16:58 Subject: link user-name with ssh-login Message-ID: <4F6765D0.5060706@gmail.com> URL: https://gitlist.dev/e/4F6765D0.5060706%40gmail.com ``` Hi, I have small ssh-based git server used for insite code development. But there is one thing I can't find how to set. In the server, each developer has a valid ssh account (I switched the shell to git-shell). The problem is that when a developer commit's some code, he can freely set in his local .git/config file the user name he want's to appear in the commit logs. Is there any way to link/force a certain ssh login to a name? Thanks, Roberto -- ----------------------------------------------------- Marcos Roberto Greiner Os otimistas acham que estamos no melhor dos mundos Os pessimistas tem medo de que isto seja verdade James Branch Cabell ----------------------------------------------------- ``` ## Junio C Hamano, 2012-03-19 19:15 Subject: Re: link user-name with ssh-login Message-ID: <7v7gygbdxg.fsf@alter.siamese.dyndns.org> URL: https://gitlist.dev/e/7v7gygbdxg.fsf%40alter.siamese.dyndns.org In-Reply-To: <4F6765D0.5060706@gmail.com> ``` Roberto writes: > I have small ssh-based git server used for insite code > development. But there is one thing I can't find how to set. > > In the server, each developer has a valid ssh account (I switched the > shell to git-shell). The problem is that when a developer commit's > some code, he can freely set in his local .git/config file the user > name he want's to appear in the commit logs. Is there any way to > link/force a certain ssh login to a name? A pre-receive hook that lists the author names of the commits, along the lines of "git log --format='%an <%ae>' $OLD_HEAD..$NEW_HEAD" and compares against the name of the user authenticated against your SSH server would be a way to do this. But that would mean you are forbidding people to accept patches from others, inspect the patches for validity and vouch for them, while giving the credit to them by recoding the author names of the patch authors. Perhaps checking the committer name would suit your situation better. I dunno. ``` ## Jeff King, 2012-03-19 20:57 Subject: Re: link user-name with ssh-login Message-ID: <20120319205747.GB3039@sigill.intra.peff.net> URL: https://gitlist.dev/e/20120319205747.GB3039%40sigill.intra.peff.net In-Reply-To: <7v7gygbdxg.fsf@alter.siamese.dyndns.org> ``` On Mon, Mar 19, 2012 at 12:15:07PM -0700, Junio C Hamano wrote: > A pre-receive hook that lists the author names of the commits, along the > lines of "git log --format='%an <%ae>' $OLD_HEAD..$NEW_HEAD" and compares > against the name of the user authenticated against your SSH server would > be a way to do this. > > But that would mean you are forbidding people to accept patches from > others, inspect the patches for validity and vouch for them, while giving > the credit to them by recoding the author names of the patch authors. > > Perhaps checking the committer name would suit your situation better. I > dunno. Then you would be forbidding merges of other people's work, no? Even if the other person's commits are available in the upstream repo, they might be hitting this ref for the first time, and would be generally be checked by such a hook. -Peff ``` ## Shawn Pearce, 2012-03-19 21:56 Subject: Re: link user-name with ssh-login Message-ID: URL: https://gitlist.dev/e/CAJo%3DhJvqr2pKVje490g2k2Wxdf2rrQYsrWQ2eN6bPn84fRxLEQ%40mail.gmail.com In-Reply-To: <20120319205747.GB3039@sigill.intra.peff.net> ``` On Mon, Mar 19, 2012 at 13:57, Jeff King wrote: > On Mon, Mar 19, 2012 at 12:15:07PM -0700, Junio C Hamano wrote: > >> A pre-receive hook that lists the author names of the commits, along the >> lines of "git log --format='%an <%ae>' $OLD_HEAD..$NEW_HEAD" and compares >> against the name of the user authenticated against your SSH server would >> be a way to do this. >> >> But that would mean you are forbidding people to accept patches from >> others, inspect the patches for validity and vouch for them, while giving >> the credit to them by recoding the author names of the patch authors. >> >> Perhaps checking the committer name would suit your situation better.  I >> dunno. > > Then you would be forbidding merges of other people's work, no? Even if > the other person's commits are available in the upstream repo, they > might be hitting this ref for the first time, and would be generally be > checked by such a hook. Most hooks that are trying to do this use "$NEW_HEAD --not --all" to only examine commits that would be newly reachable. Already reachable commits are presumed valid. If you want to merge someone else's commits, just make sure they have already pushed their commits to a branch somewhere, like a refs/heads/$USER/ sandbox space or something. ``` ## Sitaram Chamarty, 2012-03-21 16:30 Subject: Re: link user-name with ssh-login Message-ID: URL: https://gitlist.dev/e/CAMK1S_iND20y%2B5GaeEpUzXWFZLMXa%3DXUs-b3hDaZ%2BWvhaCZvnw%40mail.gmail.com In-Reply-To: <4F6765D0.5060706@gmail.com> ``` On Mon, Mar 19, 2012 at 10:28 PM, Roberto wrote: > Hi, > > I have small ssh-based git server used for insite code development. But > there is one thing I can't find how to set. > > In the server, each developer has a valid ssh account (I switched the shell > to git-shell). The problem is that when a developer commit's some code, he > can freely set in his local .git/config file the user name he want's to > appear in the commit logs. Is there any way to link/force a certain ssh > login to a name? along the lines of what others already said, here's my rant on this requirement: https://github.com/sitaramc/gitolite/blob/pu/contrib/VREF/gl-VREF-EMAIL_CHECK#L37 ```