Re: [gitorious] Gitorious Kerberos Authentication Silently Fails

2013-02-26 Thread Ken Dreyer
Hi Joshua, It looks like some email to the list got delayed, and I think we might have talked about this in IRC, but I'll reply here too for the record. >From your pastebin I see you have this line: KrbMethodK5Passwd on mod_auth_kerb has two modes of operation: Negotiate authentication and Bas

[gitorious] Gitorious Kerberos Authentication Silently Fails

2013-02-26 Thread josh
Hello, again. I'm still working toward authenticating Gitorious users against my existing FreeIPA v2 install. I began the LDAP auth procedure, but when I saw the Kerberos stuff in there, I started going that route, because I'm more comfortable with Kerberos than I am with LDAP. At the moment,

Re: [gitorious] Kerberos authentication

2012-05-17 Thread Ken Dreyer
On Thu, May 3, 2012 at 11:26 AM, Marius Mårnes Mathiesen wrote: > On Wed, May 2, 2012 at 5:33 AM, Ken Dreyer wrote: > I think this looks really good, and I'd love it if you'd submit a merge > request for it. > > Thanks - this is really appreciated! Thanks for the encouragement. I've submitted th

Re: [gitorious] Kerberos authentication

2012-05-03 Thread Marius Mårnes Mathiesen
On Wed, May 2, 2012 at 5:33 AM, Ken Dreyer wrote: > On Mon, Apr 23, 2012 at 9:20 AM, Ken Dreyer wrote: > > Both patches are attached, rebased against current master (430eb2bda). > > Please let me know if these look ok :) > > Gitorious devs, > > If my approach here is ok, please let me know and I

Re: [gitorious] Kerberos authentication

2012-05-01 Thread Ken Dreyer
On Mon, Apr 23, 2012 at 9:20 AM, Ken Dreyer wrote: > Both patches are attached, rebased against current master (430eb2bda). > Please let me know if these look ok :) Gitorious devs, If my approach here is ok, please let me know and I'll submit a merge request to get this into mainline. - Ken --

Re: [gitorious] Kerberos authentication

2012-04-23 Thread Ken Dreyer
On Tue, Apr 17, 2012 at 2:32 AM, Marius Mårnes Mathiesen wrote: > Great work! I know next to nothing about Kerberos, but it's been on my todo > list for a while to investigate how to support it in Gitorious. Thanks! I appreciate your review and your feedback. I implemented your suggestion for mo

Re: [gitorious] Kerberos authentication

2012-04-17 Thread Marius Mårnes Mathiesen
Ken, Great work! I know next to nothing about Kerberos, but it's been on my todo list for a while to investigate how to support it in Gitorious. I see that you had to do quite some legwork to allow for an authentication API that doesn't require an explicit username and password. I'd really prefer

Re: [gitorious] Kerberos authentication

2012-04-12 Thread Ken Dreyer
On Wed, Apr 11, 2012 at 8:10 PM, Ken Dreyer wrote: > I recently hacked Kerberos authentication onto the Gitorious web interface. I ended up implementing this in a less hackish way, with a proper Gitorious::Authentication::KerberosAuthentication module. The core code changes are not as daunting no

[gitorious] Kerberos authentication

2012-04-12 Thread Ken Dreyer
I recently hacked Kerberos authentication onto the Gitorious web interface. In conjunction with Apache's mod_auth_kerb, the Rails app pulls the username out of request.env['REMOTE_USER'] and uses that in a manner similar to the current code's OpenID handling: If the user doesn't yet exist in th