Disabling anonymous http git clone

[Michael Mittentag]

I just setup gerrit, and realized anonymous http by default is on.

Based on the documentation I added the following to /etc/gerrit.config

[download]

        scheme = ssh

Restarted gerrit, but all that did was remove it from the web interface.

From any linux box in my network I am still able to do the following:

git clone http://gerrit:8080/demo-project

Even if I shut down apache I can still do it?

Is there a way to disable that feature and only allow ssh access even for read-only?

I am running the latest version 2.6.1

Thanks

[Thomas Swindells (tswindel)]

Have you checked your access permissions on All Projects.

If you remove read permission from Anonymous Users (but leave it on Registered Users) then anonymous read won’t be allowed so anonymous fetch won’t be allowed. This would also mean users would have to log into the UI before being able to do much.

 

Thomas

 

--
--
To unsubscribe, email repo-discuss...@googlegroups.com
More info at http://groups.google.com/group/repo-discuss?hl=en
 
---
You received this message because you are subscribed to the Google Groups "Repo and Gerrit Discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to repo-discuss...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

[Michael Mittentag]

Thank you very much that fixed my problem now it prompts for username and password