Re: [git-users] How do you create kerberos authenticated linux script to pull from Apache https enabled git server?

[Konstantin Khomoutov]

On Mon, 3 Apr 2017 08:50:03 -0700 (PDT)
ken edward  wrote:

I've replied to your x-post to the main Git list [2] but for some reason
it did not get through, so re-posting here:

> I have my git repositories behind an apache server configured with
> kerberos.
[...]
> BUT, I want to write a script on linux that will also pass the
> kerberos credential to the apache GIT server without having any
> manually intervention. Seems I would create a kerberos keytab for the
> principal and then use that to authenticate kinit supports
> authenticating from a keytab using the -k -t  options,
> but has anyone done this?

Git uses libcurl for HTTP[S] transport; cURL supports ":" as the
user:password spec to imply using SSO when it's told to use NTLM or
GSSAPI (and hence SPNEGO and Kerberos), so first try using something
like http://:@server/path/to/repo.git as your URLs.

See [1] for more info.

1. https://public-inbox.org/git/20170222173936.25016-1-dtur...@twosigma.com/
2. 
https://public-inbox.org/git/002501d2ac96$42a272a0$c7e757e0$@nexbridge.com/T/#t

-- 
You received this message because you are subscribed to the Google Groups "Git 
for human beings" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to git-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[git-users] How do you create kerberos authenticated linux script to pull from Apache https enabled git server?

[ken edward]

Hello,

I have created a AD authentication enabled apache server that allows users 
to pull a git repo. Works fine, but users have to enter credentials 
manually, or create clear text script (bad)

I can easily create a kerberos authenticated GIT apache server but how do I 
create a linux script that utilizes the kerberos credential to pull from 
the GIT repo via https?

Thank you for any and all help!
Ken


-- 
You received this message because you are subscribed to the Google Groups "Git 
for human beings" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to git-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.