AuthenticatingHg » History » Version 7

Chris Cannam, 2010-08-04 10:50 AM

1 2 Chris Cannam
h2. Authentication for Mercurial activity
2 2 Chris Cannam
3 2 Chris Cannam
h3. Requirements
4 2 Chris Cannam
5 2 Chris Cannam
# *Clone/pull from repo for public project*: Any user, no authentication required
6 4 Chris Cannam
# *Clone/pull from repo for private project*: Permitted users only
7 4 Chris Cannam
# *Push to repo for public project*: Permitted users only
8 4 Chris Cannam
# *Push to repo for private project*: Permitted users only
9 4 Chris Cannam
10 4 Chris Cannam
What constitutes a permitted user?
11 4 Chris Cannam
12 4 Chris Cannam
* A user who is a member of the project?
13 4 Chris Cannam
* A user who is identified in the [web] section of the repository?
14 4 Chris Cannam
* A user who is both a member and identified in the [web] section?
15 4 Chris Cannam
* A user who is either a member or identified in the [web] section?
16 4 Chris Cannam
* A user who is identified in the [web] section, if any, or is a member if there is no such section?
17 5 Chris Cannam
18 5 Chris Cannam
h3. Techniques
19 5 Chris Cannam
20 5 Chris Cannam
* Apache authentication against Redmine user database using mod_auth_mysql (no support for LDAP-authenticated users?)
21 6 Chris Cannam
* Apache authentication against Redmine users using the mod_perl module Redmine.pm or a variant thereof (http://redmine.rubyforge.org/svn/trunk/extra/svn/Redmine.pm -- designed for SVN access via WebDAV)?
22 6 Chris Cannam
* Hg repository [web]-section authorisation using hgwebdir.cgi (http://mercurial.selenic.com/wiki/PublishingRepositories#Setting_up_the_hgweb.cgi_script)
23 7 Chris Cannam
24 7 Chris Cannam
Other links on this subject:
25 7 Chris Cannam
26 7 Chris Cannam
* Separation between authentication and authorisation activities: http://markmail.org/message/xmav6qg3is3xptve#query:+page:1+mid:xmav6qg3is3xptve+state:results
27 7 Chris Cannam
* hgrc [web] section: http://www.selenic.com/mercurial/hgrc.5.html#web
28 7 Chris Cannam
* Using mod_auth_mysql to authenticate against the Redmine database directly: http://maff.ailoo.net/2009/03/authenticate-apache-against-redmine-with-authmysql/