I use likewise-open to connect to a Windows AD, and I am able to see AD users.

What should I do to authenticate a user for git when I push to and pull from a git repository? Where is this configured?


There is already already this script for group user authentication through AD, within gitolite, in the contrib/ldap directory.
The idea remain to have an intermediate layer (here with gitolite, a ssh-based layer through forced commands), which is able to authorized a git command based on the result of a LDAP query.

  • I must use ssh? I think about http.. So gitolite should solve authentication problem? I configure it to use AD and to authenticate git repository directory ? – netmajor Feb 24 '11 at 22:51
  • @netmajor: you need a layer which will have a way to identify the user, in order to match that user with an AD. If you layer has a way to get a user id, then it can be used to query the AD, as the script I mention illustrates. You don't have to use gitolite, but it is an example of such a layer having a secure way to check a user id (since the user has to have the proper private key in order to be matched to his/her deployed public key on the gitolite side). – VonC Feb 25 '11 at 5:07

This my post on the subject (translated from Russian by Google).
Maybe it will help.

GIT, AD and SSH. Or how to control access to the GIT through AD

  • 3
    Welcome to Ask Ubuntu! Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference. – Peachy Nov 7 '12 at 11:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.