Home / server / Questions / 482937
Accepted
Nicolas Raoul
Asked: 2013-02-28 01:10:16 +0800 CST

Kerberos authentication for Git server?

  • 772

I have a Git server, and I want to make it usable by all Kerberos-logged users.

eg: if a user has a valid Kerberos ticket, she can start pushing to Git without having to provide any username/password.

Is it even possible to do this with Git?
All I could find was this old unanswered question on the Git mailing list (with http://), and this project that says it is out-of-date (with git://).

Server is on Ubuntu 2012.10, but I could move it to Windows Server 2012 if necessary.
I can dictate which software to use on client-side.

git

2 Answers

  1. You can make the server user SSH with kerberos (just google for kerberos and SSH) and then git also will work with those kerberos users when you user git+ssh.

    • 1
  2. Best Answer

    Author of out-of-date project here; your best bet is to configure SSH to accept kerberos tickets for authentication -- it's straightforward and well documented across the internet.

    If that doesn't meet your requirements for whatever reason, you could fall back to using git-http-backend to serve git over http{,s}, and then apache's mod_auth_kerb to authenticate access to that. I've had success with this, but it's fiddly to set up.

    (mod_auth_kerb is libapache-mod-auth-kerb on ubuntu, git comes with git-http-backend)

    • 1