Jeff King
fdae191003
doc/http-backend: clarify "half-auth" repo configuration
...
When the http-backend is set up to allow anonymous read but
authenticated write, the http-backend manual suggests
catching only the "/git-receive-pack" POST of the packfile,
not the initial "info/refs?service=git-receive-pack" GET in
which we advertise refs.
This does work and is secure, as we do not allow any write
during the info/refs request, and the information in the ref
advertisement is the same that you would get from a fetch.
However, the configuration required by the server is
slightly more complex. The default `http.receivepack`
setting is to allow pushes if the webserver tells us that
the user authenticated, and otherwise to return a 403
("Forbidden"). That works fine if authentication is turned
on completely; the initial request requires authentication,
and http-backend realizes it is OK to do a push.
But for this "half-auth" state, no authentication has
occurred during the initial ref advertisement. The
http-backend CGI therefore does not think that pushing
should be enabled, and responds with a 403. The client
cannot continue, even though the server would have allowed
it to run if it had provided credentials.
It would be much better if the server responded with a 401,
asking for credentials during the initial contact. But
git-http-backend does not know about the server's auth
configuration (so a 401 would be confusing in the case of a
true anonymous server). Unfortunately, configuring Apache to
recognize the query string and apply the auth appropriately
to receive-pack (but not upload-pack) initial requests is
non-trivial.
The site admin can work around this by just turning on
http.receivepack explicitly in its repositories. Let's
document this workaround.
Signed-off-by: Jeff King <peff@peff.net >
Signed-off-by: Junio C Hamano <gitster@pobox.com >
2013-04-11 07:33:07 -07:00
..
2013-02-05 16:13:32 -08:00
2013-04-07 15:27:23 -07:00
2013-03-25 13:46:42 -07:00
2013-02-02 21:46:52 -08:00
2013-02-01 13:53:25 -08:00
2013-02-01 13:53:33 -08:00
2013-03-21 14:17:32 -07:00
2013-04-01 09:19:30 -07:00
2009-12-03 12:41:37 -08:00
2013-02-17 15:25:52 -08:00
2010-01-31 10:24:53 -08:00
2012-04-26 13:19:06 -07:00
2013-03-25 13:46:42 -07:00
2010-08-20 10:53:56 -07:00
2013-02-01 13:53:33 -08:00
2013-01-11 09:11:10 -08:00
2013-03-07 11:16:54 -08:00
2012-04-20 15:49:16 -07:00
2011-07-06 14:26:26 -07:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-14 10:29:01 -08:00
2013-02-01 13:53:33 -08:00
2013-02-07 14:41:38 -08:00
2013-02-01 13:53:33 -08:00
2011-03-11 10:59:16 -05:00
2011-09-22 16:38:22 -07:00
2013-01-06 14:26:38 -08:00
2013-02-01 13:53:33 -08:00
2011-03-11 10:59:16 -05:00
2013-02-01 13:53:33 -08:00
2012-09-03 15:53:37 -07:00
2011-07-06 14:26:26 -07:00
2011-07-06 14:26:26 -07:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2012-06-19 11:35:19 -07:00
2013-02-01 13:53:33 -08:00
2013-04-03 09:26:07 -07:00
2013-01-11 16:47:07 -08:00
2011-07-06 14:26:26 -07:00
2012-08-08 12:11:54 -07:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-05 16:13:32 -08:00
2013-02-05 16:13:32 -08:00
2013-02-01 13:53:33 -08:00
2013-03-25 13:46:42 -07:00
2011-07-06 14:26:26 -07:00
2011-07-06 14:26:26 -07:00
2011-05-26 22:15:39 -07:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2012-04-26 13:19:06 -07:00
2013-01-14 07:59:46 -08:00
2013-01-11 09:09:30 -08:00
2013-02-01 13:53:33 -08:00
2013-03-25 13:46:42 -07:00
2012-02-23 11:20:15 -08:00
2013-01-21 16:26:26 -08:00
2013-02-01 13:53:33 -08:00
2011-07-06 14:26:26 -07:00
2013-02-01 13:53:33 -08:00
2012-04-26 13:19:06 -07:00
2011-07-06 14:26:26 -07:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-04-11 07:33:07 -07:00
2013-02-01 13:53:33 -08:00
2011-07-06 14:26:26 -07:00
2011-07-06 14:26:26 -07:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2011-10-16 11:09:35 -07:00
2013-02-01 13:53:33 -08:00
2012-08-06 14:04:16 -07:00
2013-02-01 13:53:33 -08:00
2012-09-07 10:58:35 -07:00
2011-03-11 10:59:16 -05:00
2012-01-12 23:34:26 -08:00
2011-07-06 14:26:26 -07:00
2012-08-31 11:45:33 -07:00
2011-08-04 15:49:13 -07:00
2013-02-01 13:53:33 -08:00
2011-07-06 14:26:26 -07:00
2011-07-06 14:26:26 -07:00
2013-04-01 09:19:37 -07:00
2013-02-01 13:53:33 -08:00
2012-08-27 11:55:17 -07:00
2013-02-01 13:53:33 -08:00
2011-07-06 14:26:26 -07:00
2013-02-01 13:53:25 -08:00
2011-03-11 10:59:16 -05:00
2012-10-25 06:15:56 -04:00
2013-02-05 16:13:32 -08:00
2013-02-01 13:53:33 -08:00
2011-07-06 14:26:26 -07:00
2012-08-24 12:05:30 -07:00
2011-07-06 14:26:26 -07:00
2011-07-06 14:26:26 -07:00
2011-07-06 14:26:26 -07:00
2011-07-06 14:26:26 -07:00
2011-07-06 14:26:26 -07:00
2013-03-27 10:51:10 -07:00
2013-03-26 12:40:14 -07:00
2013-02-01 13:53:33 -08:00
2012-01-06 12:44:01 -08:00
2013-02-01 13:53:33 -08:00
2011-09-06 11:42:12 -07:00
2013-02-01 13:53:33 -08:00
2011-07-06 14:26:26 -07:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 14:12:34 -08:00
2013-02-07 14:41:45 -08:00
2012-09-06 13:23:22 -07:00
2012-02-28 14:55:39 -08:00
2013-02-01 13:53:33 -08:00
2011-07-06 14:26:26 -07:00
2011-07-06 14:26:26 -07:00
2012-04-26 13:19:06 -07:00
2013-01-16 12:50:23 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2012-04-26 13:19:06 -07:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:25 -08:00
2013-02-01 13:53:33 -08:00
2012-03-28 11:18:35 -07:00
2011-09-11 21:52:18 -07:00
2013-02-01 13:53:33 -08:00
2011-07-06 14:26:26 -07:00
2013-01-14 07:59:03 -08:00
2011-07-06 14:26:26 -07:00
2013-02-01 13:53:33 -08:00
2012-04-26 13:19:06 -07:00
2012-04-26 13:19:06 -07:00
2011-03-11 10:59:16 -05:00
2012-12-10 08:18:25 -08:00
2013-04-01 09:19:30 -07:00
2013-02-05 16:13:32 -08:00
2013-02-27 10:10:28 -08:00
2013-02-01 13:53:33 -08:00
2012-10-21 12:17:38 -07:00
2013-04-03 09:18:01 -07:00
2012-04-26 13:19:06 -07:00
2013-02-01 13:54:46 -08:00
2011-07-06 14:26:26 -07:00
2011-07-06 14:26:26 -07:00
2013-03-25 13:46:42 -07:00
2013-02-01 13:53:25 -08:00
2011-07-06 14:26:26 -07:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2011-07-06 14:26:26 -07:00
2013-04-07 15:27:23 -07:00
2013-02-01 13:53:33 -08:00
2013-03-26 12:40:04 -07:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-03-25 13:46:42 -07:00
2013-02-05 16:13:32 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-07 14:41:45 -08:00
2013-02-01 13:54:46 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2011-11-08 13:37:10 -08:00
2010-09-09 16:17:59 -07:00
2013-01-05 23:41:42 -08:00
2013-02-07 14:42:16 -08:00
2009-12-05 10:03:49 -08:00
2009-10-22 12:59:50 -07:00
2013-02-07 14:42:16 -08:00
2013-03-21 15:47:38 -07:00
2012-09-08 21:27:19 -07:00
2013-04-03 09:26:27 -07:00
2012-09-20 10:28:51 -07:00
2012-04-26 13:19:06 -07:00
2013-02-01 13:53:33 -08:00
2013-03-17 00:11:11 -07:00
2011-11-22 18:16:59 -08:00
2013-02-01 13:53:33 -08:00
2013-02-01 13:53:33 -08:00
2013-02-07 14:41:45 -08:00
2012-08-07 14:30:52 -07:00
2013-04-01 09:19:04 -07:00