Re: [PATCH v3] remote-curl: fall back to Basic auth if Negotiate fails

2015-03-12 Thread Dan Langille (dalangil)
> On Mar 11, 2015, at 5:59 PM, brian m. carlson > wrote: > > On Wed, Mar 11, 2015 at 07:33:05PM +, Dan Langille (dalangil) wrote: >>> On Mar 10, 2015, at 6:29 PM, brian m. carlson >>> wrote: >>> Does it work with a ticket if you specify a username,

Re: [PATCH v3] remote-curl: fall back to Basic auth if Negotiate fails

2015-03-12 Thread Dan Langille (dalangil)
> On Mar 10, 2015, at 6:29 PM, brian m. carlson > wrote: > > On Tue, Mar 10, 2015 at 06:05:46PM +, Dan Langille (dalangil) wrote: >>> We have made progress I think. >>> >>> With stock git: >>> >>> tl;dr: 1 - with a ticket, you get p

Re: [PATCH v3] remote-curl: fall back to Basic auth if Negotiate fails

2015-03-12 Thread Dan Langille (dalangil)
> On Feb 25, 2015, at 3:59 PM, Dan Langille (dalangil) > wrote: > >> On Feb 24, 2015, at 4:03 PM, Dan Langille (dalangil) >> wrote: >> >>> On Feb 19, 2015, at 3:35 PM, brian m. carlson >>> wrote: >>> >>> On Wed, Feb 18, 2015

Re: [PATCH v3] remote-curl: fall back to Basic auth if Negotiate fails

2015-02-25 Thread Dan Langille (dalangil)
> On Feb 24, 2015, at 4:03 PM, Dan Langille (dalangil) > wrote: > >> On Feb 19, 2015, at 3:35 PM, brian m. carlson >> wrote: >> >> On Wed, Feb 18, 2015 at 04:17:46PM +, Dan Langille (dalangil) wrote: >>> I just built from ‘master’, on FreeBSD

Re: [PATCH v3] remote-curl: fall back to Basic auth if Negotiate fails

2015-02-24 Thread Dan Langille (dalangil)
> On Feb 19, 2015, at 3:35 PM, brian m. carlson > wrote: > > On Wed, Feb 18, 2015 at 04:17:46PM +, Dan Langille (dalangil) wrote: >> I just built from ‘master’, on FreeBSD 9.3: >> >> cd ~/src >> git clone https://github.com/git/git.git >> cd gi

Re: [PATCH v3] remote-curl: fall back to Basic auth if Negotiate fails

2015-02-18 Thread Dan Langille (dalangil)
On Feb 17, 2015, at 6:36 PM, Junio C Hamano wrote: > > "Dan Langille (dalangil)" writes: > >>> On Jan 20, 2015, at 7:22 PM, Junio C Hamano wrote: >>> >>> "Dan Langille (dalangil)" writes: >>> >>>> I did not

Re: [PATCH v3] remote-curl: fall back to Basic auth if Negotiate fails

2015-02-17 Thread Dan Langille (dalangil)
> On Jan 20, 2015, at 7:22 PM, Junio C Hamano wrote: > > "Dan Langille (dalangil)" writes: > >> I did not test this patch. Is that holding up a commit? > > I am hoping that you rebuilt the Git you use with this patch by the > time you wrote the message I

Re: [PATCH v3] remote-curl: fall back to Basic auth if Negotiate fails

2015-01-22 Thread Dan Langille (dalangil)
> On Jan 20, 2015, at 7:22 PM, Junio C Hamano wrote: > > "Dan Langille (dalangil)" writes: > >> I did not test this patch. Is that holding up a commit? > > I am hoping that you rebuilt the Git you use with this patch by the > time you wrote the message I

Re: [PATCH v3] remote-curl: fall back to Basic auth if Negotiate fails

2015-01-20 Thread Dan Langille (dalangil)
I did not test this patch. Is that holding up a commit? — Dan Langille Infrastructure & Operations Talos Group Sourcefire, Inc. > On Jan 7, 2015, at 7:29 PM, brian m. carlson > wrote: > > Apache servers using mod_auth_kerb can be configured to allow the user > to authenticate either using Neg

Re: [PATCH v2] remote-curl: fall back to Basic auth if Negotiate fails

2015-01-06 Thread Dan Langille (dalangil)
> On Jan 6, 2015, at 10:31 AM, Dan Langille (dalangil) > wrote: > > On Jan 5, 2015, at 6:53 PM, brian m. carlson > wrote: >> >> On Mon, Jan 05, 2015 at 09:23:32PM +0000, Dan Langille (dalangil) wrote: >>> I have tried both patches. Neither succeeds her

Re: [PATCH v2] remote-curl: fall back to Basic auth if Negotiate fails

2015-01-06 Thread Dan Langille (dalangil)
> On Jan 6, 2015, at 10:31 AM, Dan Langille (dalangil) > wrote: > > On Jan 5, 2015, at 6:53 PM, brian m. carlson > wrote: >> >> On Mon, Jan 05, 2015 at 09:23:32PM +0000, Dan Langille (dalangil) wrote: >>> I have tried both patches. Neither succeeds her

Re: [PATCH v2] remote-curl: fall back to Basic auth if Negotiate fails

2015-01-06 Thread Dan Langille (dalangil)
On Jan 5, 2015, at 6:53 PM, brian m. carlson wrote: > > On Mon, Jan 05, 2015 at 09:23:32PM +0000, Dan Langille (dalangil) wrote: >> I have tried both patches. Neither succeeds here. I patched git version >> 2.2.1 but I don’t think that affects this. > > You are

Re: [PATCH v2] remote-curl: fall back to Basic auth if Negotiate fails

2015-01-05 Thread Dan Langille (dalangil)
I have tried both patches. Neither succeeds here. I patched git version 2.2.1 but I don’t think that affects this. Before I flood the list with debug runs, I wanted to make sure I was testing with an appropriate configuration: SSLOptions +StdenvVars Options +ExecCGI +FollowSymLinks +SymLin

Re: [PATCH v2] remote-curl: fall back to Basic auth if Negotiate fails

2015-01-05 Thread Dan Langille (dalangil)
I’ve found the latest patch. Trying this now. Thanks. — Dan Langille Infrastructure & Operations Talos Group Sourcefire, Inc. > On Jan 1, 2015, at 2:56 PM, brian m. carlson > wrote: > > Apache servers using mod_auth_kerb can be configured to allow the user > to authenticate either using Nego

Re: [PATCH] remote-curl: fall back to Basic auth if Negotiate fails.

2015-01-05 Thread Dan Langille (dalangil)
> On Dec 26, 2014, at 11:01 PM, brian m. carlson > wrote: > > Apache servers using mod_auth_kerb can be configured to allow the user > to authenticate either using Negotiate (using the Kerberos ticket) or > Basic authentication (using the Kerberos password). Often, one will > want to use Negoti

Re: git-http-backend auth via Kerberos

2014-12-19 Thread Dan Langille (dalangil)
On Dec 19, 2014, at 3:16 PM, brian m. carlson wrote: > > On Fri, Dec 19, 2014 at 03:07:20PM +0000, Dan Langille (dalangil) wrote: >> Correct, we are trying to avoid that. In addition, there is only https, no >> http. > > I don't think HTTPS versus HTTP matter

Re: git-http-backend auth via Kerberos

2014-12-19 Thread Dan Langille (dalangil)
> On Dec 19, 2014, at 10:07 AM, Dan Langille (dalangil) > wrote: > >> You might also try specifying KrbMethodK5Passwd on explicitly. I don't >> happen to use that option (I use Kerberos to avoid passwords altogether) >> so that might work for you. >> >

Re: git-http-backend auth via Kerberos

2014-12-19 Thread Dan Langille (dalangil)
> On Dec 19, 2014, at 10:07 AM, Dan Langille (dalangil) > wrote: > >> You might also try specifying KrbMethodK5Passwd on explicitly. I don't >> happen to use that option (I use Kerberos to avoid passwords altogether) >> so that might work for you. >> >

Re: git-http-backend auth via Kerberos

2014-12-19 Thread Dan Langille (dalangil)
> On Dec 18, 2014, at 5:54 PM, brian m. carlson > wrote: > > On Thu, Dec 18, 2014 at 10:19:19PM +, Dan Langille (dalangil) wrote: >> This is what happens without a valid ticket: >> >> $ git clone https://us.example.com/git/clamav-bytecode-compiler >> Cl

git-http-backend auth via Kerberos

2014-12-18 Thread Dan Langille (dalangil)
I am trying to get http://git-scm.com/docs/git-http-backend to auth via Kerberos. I have success when a Kerberos ticket is present. I am trying to get git to authenticate with Kerberos when a ticket is not present. Here is what succeeds with a ticket: SSLOptions +StdenvVars Options +Exec