Re: git-http-backend auth via Kerberos

2014-12-19 Thread Dan Langille (dalangil)
On Dec 19, 2014, at 3:16 PM, brian m. carlson wrote: > > On Fri, Dec 19, 2014 at 03:07:20PM +, Dan Langille (dalangil) wrote: >> Correct, we are trying to avoid that. In addition, there is only https, no >> http. > > I don't think HTTPS versus HTTP matters. I use Kerberos over HTTPS only

Re: git-http-backend auth via Kerberos

2014-12-19 Thread brian m. carlson
On Fri, Dec 19, 2014 at 03:07:20PM +, Dan Langille (dalangil) wrote: > Correct, we are trying to avoid that. In addition, there is only https, no > http. I don't think HTTPS versus HTTP matters. I use Kerberos over HTTPS only and it works fine. > To be clear, for the following tests, there

Re: git-http-backend auth via Kerberos

2014-12-19 Thread Dan Langille (dalangil)
> On Dec 19, 2014, at 10:07 AM, Dan Langille (dalangil) > wrote: > >> You might also try specifying KrbMethodK5Passwd on explicitly. I don't >> happen to use that option (I use Kerberos to avoid passwords altogether) >> so that might work for you. >> >> I don't know what version of git you're

Re: git-http-backend auth via Kerberos

2014-12-19 Thread Dan Langille (dalangil)
> On Dec 19, 2014, at 10:07 AM, Dan Langille (dalangil) > wrote: > >> You might also try specifying KrbMethodK5Passwd on explicitly. I don't >> happen to use that option (I use Kerberos to avoid passwords altogether) >> so that might work for you. >> >> I don't know what version of git you're

Re: git-http-backend auth via Kerberos

2014-12-19 Thread Dan Langille (dalangil)
> On Dec 18, 2014, at 5:54 PM, brian m. carlson > wrote: > > On Thu, Dec 18, 2014 at 10:19:19PM +, Dan Langille (dalangil) wrote: >> This is what happens without a valid ticket: >> >> $ git clone https://us.example.com/git/clamav-bytecode-compiler >> Cloning into 'clamav-bytecode-compiler'.

Re: git-http-backend auth via Kerberos

2014-12-18 Thread brian m. carlson
On Thu, Dec 18, 2014 at 10:19:19PM +, Dan Langille (dalangil) wrote: > This is what happens without a valid ticket: > > $ git clone https://us.example.com/git/clamav-bytecode-compiler > Cloning into 'clamav-bytecode-compiler'... > Username for 'https://us.example.com': dan > Password for 'http

git-http-backend auth via Kerberos

2014-12-18 Thread Dan Langille (dalangil)
I am trying to get http://git-scm.com/docs/git-http-backend to auth via Kerberos. I have success when a Kerberos ticket is present. I am trying to get git to authenticate with Kerberos when a ticket is not present. Here is what succeeds with a ticket: SSLOptions +StdenvVars Options +Exec