has anyone used shibproxy?

[Scott Koranda]

> On 8/8/11 11:24 PM, "Josh Bialkowski" <jbialk at mit.edu> wrote:
> >
> >Has anyone ever found a way to serve version control repositories using
> >shibboleth for authentication? There was a long thread back in '09 but
> >the consensus was that the client software would have to be updated. I'm
> >wondering if there is anything new?
> 
> To avoid modifying the client, the client would have to support cookies
> and redirects and the IdP would need to use basic-auth and the artifact
> binding.
> 

In our project we are using Git over HTTPS.

We use a simple command line script to leverage the ECP
functionality available from the Shib IdP and SPs. See

https://wiki.shibboleth.net/confluence/display/SHIB2/ECP

The script is a simple ECP client and after it runs the
necessary cookie(s) are stored in a file and that file is
pointed to by an environment variable.

The git tools are linked against the curl libraries and the
curl libraries can consume and use the cookie(s) stored in 
the file and obtained by the ECP client.

To make the git tools use the cookie file we had to patch them
so they "see" the environment variable. That patch has been
accepted into the git code base and it should appear in the
next release.

Scott K