I have a Windows 2008 R2 IIS7 server with Mercurial under HTTPS. I connect to the Mercurial Repositories using TortoiseHG and via the web interface. If I don't have my username and password in the .hgrc file, them I'm prompted for my domain credentials.

What I want, is to setup my Mercurial repositories security in such away that I do not have to supply credentials through a basic authentication prompt or via entering them in cleartext in my personal .hgrc file. The user access should be inferred by being logged into the domain on the computer I am working on.

Authentication setup:

  • Anonymous Authentication: Disabled
  • ASP.Net Impersonation: Disabled
  • Basic Authentication: Enabled
  • Forms Authentication: Disabled
  • Windows Authentication: Enabled

On the client side I have my credentials in my personal .hgrc:

tag.prefix = https://MercurialServer 
tag.username = Username 
tag.password = Password

So, you're asking if TortoiseHG has support for authenticating to IIS using NTLM/Kerberos to pass the Windows Authentication mode in IIS? The answer is no; it uses the basic auth, which requires plaintext credentials, whether saved or entered.

If you were using an SSH-based protocol, it looks like there's some means to get it using GSSAPI for seamless windows auth via a supporting version of plink; food for thought.

  • Hi Shane, you hit my suspicions right on the head. I did not think NTLM/Kereros would be supported... I will look into the the "food for thought"... If I get any form of success I will update this thread. On a completely different note, I wish I could put a line break in my comments. – Ian McShane Apr 7 '11 at 5:53
  • There is this extension: bitbucket.org/hstuart/hg-kerberos -- come talk to hstuart (I'm mg) on #mercurial at webchat.freenode.net – Martin Geisler Sep 6 '11 at 10:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.