linux-Git连接到Active Directory
作者:互联网
目的:
在Oracle Linux 6上设置Git存储库.用户使用AD凭据从Windows,Mac和Linux连接.我想限制基于AD组的访问.我一直在寻找一种设置方法.我已经看到了几个选项,可以对存储库进行细粒度的访问控制,但是我没有找到可以使用AD组来管理访问的任何选项.
所以问题是:这是否可能?有人可以指出说明该过程的文档方向吗?
解决方法:
更新:
现在似乎有更多选择:
> GitLab支持LDAP authentication
> Gogs也支持LDAP
更新:
GitBlit,“用于管理,查看和服务Git存储库的开源纯Java堆栈”,开箱即用,supports LDAP authentication:
LDAP can be used to authenticate Users and optionally control Team memberships. When properly configured, Gitblit will delegate authentication to your LDAP server and will cache some user information in the usual users.conf file.
GitBlit也为lists support for Windows authentication,但仅在Windows上安装时才进行,并且仅针对本地帐户进行了测试.
先前的答案:
如果在Windows上将Git服务器移动到Bonobo Git Server,则可以use Windows authentication:
Windows Authentication
This authentication is very useful when your git server sits inside the company network and your accounts and logging information could be managed via IIS. The advantage of this approach is that your users won’t have to create another account for logging to Bonobo Git Server. They will use the existing Windows account they use on the network.
在Linux上可以这样做,但不太容易.您可能必须将PAM设置为使用LDAP或Kerberos身份验证,然后再设置configuration的do quite a lot.如果您具有Windows许可证,我强烈建议您检查Bonobo.
标签:active-directory,ldap,linux,git 来源: https://codeday.me/bug/20191029/1959614.html