Monday, 15 March 2010

git push to https repository from Intranet application with kerberos authentication -


First of all, I am normally new to https, SSL and authentication.

i Develop an intranet application, which should have some "push" with local GIT repository (hosted on a web server) and remote repository (hosted on UNIX server).

The web server is a Windows 2003 server installed with IIS, I have also installed the Windows GIT extension on this machine. Remote GIT URL looks like this: "".

On the web server, when I want to push something from the GIT bash to the remote repository, an OpenSSH popup is displayed and my Windows password is asked. If I enter the correct password, then push is done. This is due to the "askpass" configuration.

  core.askpass = C: / program files (x86) / guit / libexec / git-core / git-gui-askpass  

if i Remove the parameters of this configuration, git prompt for the password in the command window. General ...

My question: If we use Kerberos for authentication, then is it possible to realize the password without asking the user password? And how ?. I tried to configure putty but there was no success for the moment (like I wrote, I am not an expert in authentication).

I am currently using GIT-Credential-Winstor which I do not ask for a password (which is not usable on the IIS server side) when GIT asks GCW to get a password, then it GIT returns empty password, then git ends with a return code <> 0 and my application asks the user for password, call GCW to store it and command Please call git for the second time to run. It works but I'm pretty sure this is not the best solution.

However, it is clearly closed

  • Install GIT on Windows, make sure that supplied with SSPI ( - with-SPI ) GIT has been compiled
  • Install GIT on Unix Make sure that the linked libcurl is enabled with GSS-API ( - KGassapi < / Code>)
  • The way libcurl is called by Git, ANYAUTH is selected with the default username + password (: ). Bus. libcurl should be restored.

    Here SPNEGO-protected proxy works like a magic against the external treasure.


    No comments:

    Post a Comment