[gitorious] Gitorious Kerberos Authentication Silently Fails

2013-02-26 Thread josh
Hello, again. I'm still working toward authenticating Gitorious users against my existing FreeIPA v2 install. I began the LDAP auth procedure, but when I saw the Kerberos stuff in there, I started going that route, because I'm more comfortable with Kerberos than I am with LDAP. At the

Re: [gitorious] Gitorious Kerberos Authentication Silently Fails

2013-02-26 Thread Ken Dreyer
Hi Joshua, It looks like some email to the list got delayed, and I think we might have talked about this in IRC, but I'll reply here too for the record. From your pastebin I see you have this line: KrbMethodK5Passwd on mod_auth_kerb has two modes of operation: Negotiate authentication and

Re: [gitorious] Kerberos authentication

2012-05-17 Thread Ken Dreyer
On Thu, May 3, 2012 at 11:26 AM, Marius Mårnes Mathiesen marius.mathie...@gmail.com wrote: On Wed, May 2, 2012 at 5:33 AM, Ken Dreyer ktdre...@ktdreyer.com wrote: I think this looks really good, and I'd love it if you'd submit a merge request for it. Thanks - this is really appreciated!

Re: [gitorious] Kerberos authentication

2012-05-03 Thread Marius Mårnes Mathiesen
On Wed, May 2, 2012 at 5:33 AM, Ken Dreyer ktdre...@ktdreyer.com wrote: On Mon, Apr 23, 2012 at 9:20 AM, Ken Dreyer ktdre...@ktdreyer.com wrote: Both patches are attached, rebased against current master (430eb2bda). Please let me know if these look ok :) Gitorious devs, If my approach

Re: [gitorious] Kerberos authentication

2012-05-01 Thread Ken Dreyer
On Mon, Apr 23, 2012 at 9:20 AM, Ken Dreyer ktdre...@ktdreyer.com wrote: Both patches are attached, rebased against current master (430eb2bda). Please let me know if these look ok :) Gitorious devs, If my approach here is ok, please let me know and I'll submit a merge request to get this into

Re: [gitorious] Kerberos authentication

2012-04-23 Thread Ken Dreyer
On Tue, Apr 17, 2012 at 2:32 AM, Marius Mårnes Mathiesen marius.mathie...@gmail.com wrote: Great work! I know next to nothing about Kerberos, but it's been on my todo list for a while to investigate how to support it in Gitorious. Thanks! I appreciate your review and your feedback. I

[gitorious] Kerberos authentication

2012-04-12 Thread Ken Dreyer
I recently hacked Kerberos authentication onto the Gitorious web interface. In conjunction with Apache's mod_auth_kerb, the Rails app pulls the username out of request.env['REMOTE_USER'] and uses that in a manner similar to the current code's OpenID handling: If the user doesn't yet exist in

Re: [gitorious] Kerberos authentication

2012-04-12 Thread Ken Dreyer
On Wed, Apr 11, 2012 at 8:10 PM, Ken Dreyer ktdre...@ktdreyer.com wrote: I recently hacked Kerberos authentication onto the Gitorious web interface. I ended up implementing this in a less hackish way, with a proper Gitorious::Authentication::KerberosAuthentication module. The core code changes