This a is a clarification of an earlier post. I thought gitweb was the
problem.
The actual problem appears to be with /usr/libexec/git-core/git-http-backend.
Gitweb provides a list to unauthenticated users of available repositories. I
don't need that function so I have removed that package to avoid unexpected
conflicts.
I recently applied the latest patches on centos7, including git-1.8.3.1-20.
When I try to access git repos (either via web browser or git command line.)
Repos are configured to require LDAP authentication.
The httpd ssl-error.log shows
#
[Sun Aug 18 09:22:48.113435 2019] [authz_core:debug] [pid 30167]
mod_authz_core.c(809): [client x.x.x.x:35876] AH01626: authorization result of
<RequireAny>: granted [Sun Aug 18 09:22:48.119012 2019] [cgi:error] [pid 30167]
[client x.x.x.x:x] AH01215: Request not supported: '/export/gitrepos/ABC [Sun
Aug 18 09:22:48.119069 2019] [headers:debug] [pid 30167] mod_headers.c(823):
AH01502: headers: ap_headers_output_filter() [Sun Aug 18 09:22:53.124599 2019]
[ssl:info] [pid 30167] (70007)The timeout specified has expired: [client
x.x.x.x:35876] AH01991: SSL input filter read failed.
[Sun Aug 18 09:22:53.124723 2019] [ssl:debug] [pid 30167] ssl_engine_io.c(993):
[client x.x.x.x:35876] AH02001: Connection closed to child 1 with standard
shutdown (#
If I change gitrepos.conf as follows I will get an error about the script not
being found - so I know it is being called.
#ScriptAlias /git/ /usr/libexec/git-core/git-http-backend/
ScriptAlias /git/ /usr/libexec/git-core/git-http-backend_not/
# git --version
git version 1.8.3.1
# httpd -v
Server version: Apache/2.4.6 (CentOS)
Server built: Jul 29 2019 17:18:49
#
Partial config
# cat /etc/httpd/conf.d/gitrepos.conf
SetEnv GIT_PROJECT_ROOT /export/gitrepos
SetEnv GIT_HTTP_EXPORT_ALL
ScriptAlias /git/ /usr/libexec/git-core/git-http-backend/
RewriteEngine on
RewriteCond %{QUERY_STRING} service=git-receive-pack [OR]
RewriteCond %{REQUEST_URI} /git-receive-pack$
RewriteRule ^/git/ - [E=AUTHREQUIRED]
<Files "git-http-backend">
AuthType Basic
AuthBasicProvider ldap
AuthLDAPURL "ldaps://xxxxxxxxxxxxxxx)"
AuthLDAPBindDN "uid=xxxxxxxxxxxx"
AuthLDAPBindPassword xxxxxxxxxxxxxxx
AuthName "Git Access"
Require user xxxxx xxxxx xxxxx
Order deny,allow
Deny from env=AUTHREQUIRED
Satisfy any
</Files>
<Location /git/ABC>
AuthType Basic
AuthBasicProvider ldap
AuthLDAPURL "ldaps://xxxxxxxxxxxxxxx)"
AuthLDAPBindDN "uid=xxxxxxxxxxxx"
AuthLDAPBindPassword xxxxxxxxxxxxxxx
AuthName "Git Access ABC"
Require user xxxxx xxxxx xxxxx
Order deny,allow
</Location>
This had been working fine for several years.
Appreciate any advice
Thanks
