How to do with access control per repo with a smart http git server?

How to do with access control per repo with a smart http git server?

[Chunlin Zhang]

I setup a smart http git server with apache(
http://progit.org/2010/03/04/smart-http.html ),and I do the authentication with
SSPI,but how can I do with access control per repo?

In mercurial,I can do it in .hg/hgrc to configure the users who can read or
write this repo.I seems that .git/config does not have this type of config.

Does somebody know it?

Thanks!

Re: How to do with access control per repo with a smart http git server?

[Ilari Liusvaara]

On Wed, Nov 24, 2010 at 03:10:27AM +0000, Chunlin Zhang wrote:
> I setup a smart http git server with apache(
> http://progit.org/2010/03/04/smart-http.html ),and I do the authentication with
> SSPI,but how can I do with access control per repo?
> 
> Does somebody know it?

Easiest way to do it is via Gitolite.

-Ilari

Re: How to do with access control per repo with a smart http git server?

[Chunlin Zhang]

Ilari Liusvaara <ilari.liusvaara <at> elisanet.fi> writes:

> 
> On Wed, Nov 24, 2010 at 03:10:27AM +0000, Chunlin Zhang wrote:
> > I setup a smart http git server with apache(
> > http://progit.org/2010/03/04/smart-http.html ),and I do the authentication with
> > SSPI,but how can I do with access control per repo?
> > 
> > Does somebody know it?
> 
> Easiest way to do it is via Gitolite.

I notice that:"gitolite depends heavily on ssh pubkey (passwordless) access" (
https://github.com/sitaramc/gitolite/blob/pu/doc/1-INSTALL.mkd )

> 
> -Ilari
> 

Re: How to do with access control per repo with a smart http git server?

[Ilari Liusvaara]

On Wed, Nov 24, 2010 at 05:07:46AM +0000, Chunlin Zhang wrote:
> Ilari Liusvaara <ilari.liusvaara <at> elisanet.fi> writes:
> 
> > Easiest way to do it is via Gitolite.
> 
> I notice that:"gitolite depends heavily on ssh pubkey (passwordless) access" (
> https://github.com/sitaramc/gitolite/blob/pu/doc/1-INSTALL.mkd )
 
See http://github.com/sitaramc/gitolite/blob/pu/doc/http-backend.mkd

-Ilari

Re: How to do with access control per repo with a smart http git server?

[Chunlin Zhang]

Ilari Liusvaara <ilari.liusvaara <at> elisanet.fi> writes:

> 
> On Wed, Nov 24, 2010 at 05:07:46AM +0000, Chunlin Zhang wrote:

> 
> See http://github.com/sitaramc/gitolite/blob/pu/doc/http-backend.mkd

Thank you.I have read this,but I forgot to say that I am using a win32 server,
it seems that it is not supported.

I am trying to write some python script to do access control work using apache
mod_wsgi now.

> 
> -Ilari
> 

Re: How to do with access control per repo with a smart http git server?

[Chunlin Zhang]

Chunlin Zhang <zhangchunlin <at> gmail.com> writes:

> I am trying to write some python script to do access control work using apache
> mod_wsgi now.

I have just finished some python scripts working in apache+mod_wsgi
environment,authentication part using ldap(in my win32 server case I use to auth
with Active Directory server),and configure the acl using a acl file just like
the file svn use(
http://svnbook.red-bean.com/en/1.4/svn.serverconfig.pathbasedauthz.html ),but
not Path-Based,just repo-based.

If it is useful to someone else,can email me and I will share it.

> 

Re: How to do with access control per repo with a smart http git server?

[Sverre Rabbelier]

Heya,

On Wed, Nov 24, 2010 at 11:13, Chunlin Zhang <zhangchunlin@gmail.com> wrote:
> If it is useful to someone else,can email me and I will share it.

Three years down the road someone will read this message on vger, have
their mail to you bounce, and curse their luck. Why not just put it up
on github or so, link to it here, and if someone finds a use to it at
some point, all the merrier?

-- 
Cheers,

Sverre Rabbelier

Re: How to do with access control per repo with a smart http git server?

[Chunlin Zhang]

于 2010年11月26日 06:35, Sverre Rabbelier 写道:
> Heya,
>
> On Wed, Nov 24, 2010 at 11:13, Chunlin Zhang<zhangchunlin@gmail.com>  wrote:
>> If it is useful to someone else,can email me and I will share it.
>
> Three years down the road someone will read this message on vger, have
> their mail to you bounce, and curse their luck. Why not just put it up
> on github or so, link to it here, and if someone finds a use to it at
> some point, all the merrier?
Ok,I will put it on github.But after some modification,because the 
current version is quick and dirty.
>

Re: How to do with access control per repo with a smart http git server?

[Chunlin Zhang]

Chunlin Zhang <zhangchunlin <at> gmail.com> writes:
 
> 于 2010年11月26日 06:35, Sverre Rabbelier 写道:
> > Heya,

> Ok,I will put it on github.But after some modification,because the 
> current version is quick and dirty.

I have put my code to here: https://github.com/zhangchunlin/gitldapacl