search

git-as-svn / git-as-svn

Subversion frontend server for Git repositories
https://git-as-svn.github.io/git-as-svn/htmlsingle/git-as-svn.html
GNU General Public License v2.0
215 stars 45 forks source link

Feature Request: PAM authentication #372

Open SirIntellegence opened 3 years ago

SirIntellegence commented 3 years ago

My Linux server currently has the capability to allow users to log in as a windows domain user (in case it matters, using https://www.beyondtrust.com/privilege-management/active-directory-bridge) and I am having troubles figuring out how to implement the LDAP integration with the domain. Would that be possible?

slonopotamus commented 3 years ago

git-as-svn supports user authentication via LDAP, see docs.

SirIntellegence commented 3 years ago

What I mean was if it was possible to use the system user list as a repo user list. In my case, the system already support becoming a domain user. In some other cases, someone might just want to use local Linux users without using any LDAP. Does that make sense?

slonopotamus commented 3 years ago

Oh, so what you actually want is PAM authentication? Nope, this is currently not supported. I'm not even sure there exists a good Java lib to talk to libpam. I found libpam4j though the fact that it was touched last time in 2018 is a bit worrying. JPam is even more dead.

SirIntellegence commented 3 years ago

Ah. Ok. Maybe mark it for future support. Others might want it at some point in time. I think I got LDAP to work with the simple binding.

slonopotamus commented 3 years ago

libpam4j is a no-go because it does't support non-local users: kohsuke/libpam4j#2