You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Jeff Dyke <je...@gmail.com> on 2012/06/20 14:39:13 UTC
Re: [users@httpd] How to collect username from http header ?
On Wed, Jun 20, 2012 at 8:24 AM, J. Bakshi <jo...@infoservices.in> wrote:
> On Wed, 20 Jun 2012 17:44:04 +0530
> "J. Bakshi" <jo...@infoservices.in> wrote:
>
>> Dear list,
>>
>> I have a git setup where user can authenticate via https based on htpasswd authentication.
>> I need some more fine tuning ; hence I like to know the username for the specific connection.
>> Say user1 has authenticated successfully, and I like to compare his ACL based on another file.
>> How can I know the connection using username as user1 ?
>> Could anyone give me any clue how to do that ?
>>
>> Thanks
>
> IS it "RequestHeader set X-Auth-User" ?
>
> If yes, then what module should I install ?
>
> Thanks
if they are authenticated via htpasswd via BasicAuth or similar, it
should be available to you as "REMOTE_USER" with no additional modules
installed. Though accessing it will be different for different
languages.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] How to collect username from http header ?
Posted by "J. Bakshi" <jo...@infoservices.in>.
On Wed, 20 Jun 2012 08:39:13 -0400
Jeff Dyke <je...@gmail.com> wrote:
> On Wed, Jun 20, 2012 at 8:24 AM, J. Bakshi <jo...@infoservices.in> wrote:
> > On Wed, 20 Jun 2012 17:44:04 +0530
> > "J. Bakshi" <jo...@infoservices.in> wrote:
> >
> >> Dear list,
> >>
> >> I have a git setup where user can authenticate via https based on htpasswd authentication.
> >> I need some more fine tuning ; hence I like to know the username for the specific connection.
> >> Say user1 has authenticated successfully, and I like to compare his ACL based on another file.
> >> How can I know the connection using username as user1 ?
> >> Could anyone give me any clue how to do that ?
> >>
> >> Thanks
> >
> > IS it "RequestHeader set X-Auth-User" ?
> >
> > If yes, then what module should I install ?
> >
> > Thanks
> if they are authenticated via htpasswd via BasicAuth or similar, it
> should be available to you as "REMOTE_USER" with no additional modules
> installed. Though accessing it will be different for different
> languages.
Thanks for the clue. Here I'm using bash script. Shall ${REMOTE_USER} sufficient ?
Once more idea is running in my head. Why not check refs/heads/master against a
htpassword file. The present config for git push is
[..]
<LocationMatch "/git/.*/git-receive-pack$">
AuthType Basic
# Message to give to the committer
AuthName "Write access requires a password"
# File listing users with write (commit) access
AuthUserFile /home/git/pushACL
Require valid-user
</LocationMatch>
[..]
As you can see, it checks all push attempt against a htpassword file. Can I add
one more check here to check the refs/heads/master push attempt against a file too ?
Thanks
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org