SSO authentication

[Thomas Chemineau]

Hi,

I ask myself if Gitorious was able to authenticate user by using HTTP header to find username. Could it be possible ?

If not, is it easy to implement it ?

Best regards,

Thomas.

[Ken Dreyer]

On Tue, Jun 5, 2012 at 6:23 AM, Thomas Chemineau
<thomas.c...@gmail.com> wrote:
> I ask myself if Gitorious was able to authenticate user by using HTTP header
> to find username. Could it be possible ?

Hi Thomas,

I've submitted a plugin for Kerberos authentication, which is very
similar to what you describe. You could probably hack it to do Basic
or Digest auth if you don't have a Kerberos environment.

> If not, is it easy to implement it ?

If you're up for testing out something that hasn't been officially
merged into master, see

https://gitorious.org/gitorious/mainline/merge_requests/202

If it works for you, please provide positive feedback in the merge
request so the Gitorious developers will have a greater chance of
merging :)

- Ken

[Thomas Chemineau]

2012/6/5 Ken Dreyer <ktdr...@ktdreyer.com>

Hi Ken,

Thank your for you answer.

I don't have any kerberos environment (hum.. that's not true: I had one, but it is configured on my SSO main server).

For the moment, I tested your patch, and I can tell you that it does not break anything into the authentication process with the latest version of Gitorious.

Regards,

Thomas.