Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have relatively little knowledge about what exactly LDAP is and how it works except that I know I can use my LDAP account username/password to log into multiple linux servers. Right now we are using mercurial for version control however I am investigating what it would take to convert to git.

Now my first question I am pretty sure I know the answer to but just want to verify (I think the answer is yes) but since git can use ssh for connecting to the repositories, as long as the LDAP account has access to the server the git repository is hosted on, I can just assume the LDAP account would act like an regular SSH account and work for connecting to the git repository, correct?

The second question I am not so sure about and that would be if LDAP can hook into gitolite so that I could gain the access control functionality that gitolite provides. I am personally fine with scratching LDAP authentication in order to get the access control that gitolite provides though I am not sure my boss is.

share|improve this question
    
I believe I have addressed those points in my presentation 'DVCS in big corporation' on SlideShare (from stackoverflow.com/a/5685757/6309, and presented at CodeKen London: london2011.codeken.com/dvcs-git-daniel-chaffiol). For the specific confi files, see github.com/VonC/compileEverything –  VonC Jan 9 '12 at 12:18

1 Answer 1

I believe NSS-LDAP will provide system level access control via LDAP. (http://www.padl.com/OSS/nss_ldap.html) As long as gitolite uses the system level NSS to determine the access control, that should be your best bet.

So the answer to both questions is "Yes, it can be done", but you will need to setup the system to accommodate (and I am fully blindly assuming gitolite uses the system level NSS)

share|improve this answer
    
yea, gitolite from my experience with just uses ssh keys but thanks for the info. –  ryanzec Jan 9 '12 at 17:43

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.