[git-users] Git via apache https RO and RW

[Bogdan Siara]

Hello All,

I prepare configuration to run git server via apache (2.2) https and 
authentication (RO, RW) via ldap... My config is:

<VirtualHost 172.22.0.43:443>

    SetEnv GIT_PROJECT_ROOT /opt/tools/git/repositories/
    SetEnv GIT_HTTP_EXPORT_ALL
    ScriptAlias / /usr/libexec/git-core/git-http-backend/

    ServerName git.firma
    ErrorLog logs/git_firma_ssl_error_log
    TransferLog logs/git_firma_ssl_access_log
    CustomLog logs/git_firma_ssl_request_log "%t %h %{SSL_PROTOCOL}x 
%{SSL_CIPHER}x \"%r\" %b"
    LogLevel warn

    SSLEngine on
    SSLProtocol all -SSLv2 -SSLv3 +TLSv1
    SSLHonorCipherOrder On
    SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
    SSLCertificateFile /etc/httpd/certs/server/certificates/git.crt
    SSLCertificateKeyFile /etc/httpd/certs/server/keys/git.key
    SSLCACertificateFile /etc/httpd/certs/CA/CA.CRT

    <Location />
        Dav on
        Order deny,allow
        Deny from all
        AuthName "GIT Repo"
        AuthType Basic
        AuthBasicProvider ldap
        AuthzLDAPAuthoritative off
        AuthLDAPURL "ldap://172.22.0.22/ou=people,dc=firma?uid?one";
    </Location>
    <Location /piaskownica.git>
        Dav on
        Order deny,allow
        Deny from all
        Satisfy any
        #RO
        <Limit GET OPTIONS PROPFIND>
            Require user user1
            Satisfy any
        </Limit>
        #RW
        <Limit GET POST PUT DELETE CONNECT OPTIONS PROPFIND PATCH PROPPATCH 
MKCOL COPY MOVE LOCK UNLOCK>
            Require user user2
        </Limit>
    </Location>

</VirtualHost>



but RO access not work because git send POST to server... when I run:

$git.clone https://git.firma/piaskownica.git
Cloning into 'piaskownica'...
Username for 'https://git.firma': user1
Password for 'https://user1@git.firma': 
error: RPC failed; result=22, HTTP code = 401
fatal: The remote end hung up unexpectedly



In apache log:
172.22.0.28 - - [03/Feb/2015:18:54:18 +0100] "GET 
/piaskownica.git/info/refs?service=git-upload-pack HTTP/1.1" 401 475
172.22.0.28 - - [03/Feb/2015:18:54:26 +0100] "GET 
/piaskownica.git/info/refs?service=git-upload-pack HTTP/1.1" 401 475
172.22.0.28 - user1 [03/Feb/2015:18:54:26 +0100] "GET 
/piaskownica.git/info/refs?service=git-upload-pack HTTP/1.1" 200 643
172.22.0.28 - user1 [03/Feb/2015:18:54:27 +0100] "POST 
/piaskownica.git/git-upload-pack HTTP/1.1" 401 475

Question how to configure RO access via apache config?

Regards
BS

-- 
You received this message because you are subscribed to the Google Groups "Git 
for human beings" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to git-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.