Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [jgit-dev] SPNEGO authentication for jgit

Hi Laurent,

 

have you seen my changes to teach jgit to use org.apache httpclient instead of jdk’s HttpURLConnection [1][2]? JGit will then not use jdks HttpURLConnection at all and uses apaches classes
which support SPNEGO. I am not sure whether this will help but I can imagine that it will at least change the situation a lot. I could imagine that your changes are still needed also when we
use HttpClient … but I think you should test this. In the best case you would even not need your changes but simply switch to usage of HttpClient.  My guess would be that we still need your changes
also when we use httpclient. JDKs HttpURLConnection and Apaches HttpClient both support SPNEGO so the difference shouldn’t be big.
 
Is there any chance that we get tests for this? We do have unit tests where we start our own jetty based git server inside the test and check that the user gets authenticated using
BASIC authentication [3]. Is there any chance to get such a test for SPNEGO?
 
Ciao
  Chris
 
[1] https://git.eclipse.org/r/#/c/22091
[2] https://git.eclipse.org/r/#/c/22090
[3] https://raw.github.com/eclipse/jgit/master/org.eclipse.jgit.http.test/tst/org/eclipse/jgit/http/test/HttpClientTests.java

 

From: jgit-dev-bounces@xxxxxxxxxxx [mailto:jgit-dev-bounces@xxxxxxxxxxx] On Behalf Of Laurent Goujon
Sent: Dienstag, 25. Februar 2014 04:37
To: jgit-dev@xxxxxxxxxxx
Subject: [jgit-dev] SPNEGO authentication for jgit

 

Hi,

My company is using SPNEGO/Kerberos for git authentication, and it seems it doesn't work well with jgit.

I open bug 428836 [1] to track this issue, and I also tried to fix it by myself. So far, I submitted 4 patches to Gerrit to implement the feature.

- https://git.eclipse.org/r/22486
- https://git.eclipse.org/r/22487
- https://git.eclipse.org/r/22488
- https://git.eclipse.org/r/22489

It would be great if some people could review them, and provides feedback. Patches have been submitted to Hudson, but builds aborted before the end.

Thanks in advance,

Laurent


Back to the top