has anyone used shibproxy?

[Josh Bialkowski]

On Tue, 2011-08-09 at 11:21 -0500, Scott Koranda wrote:
> > >Has anyone ever found a way to serve version control repositories using
> > >shibboleth for authentication? 

> We use a simple command line script to leverage the ECP
> functionality available from the Shib IdP and SPs. See
> 
> https://wiki.shibboleth.net/confluence/display/SHIB2/ECP

Hey thanks. This looks very useful. Unfortunately, I still don't
understand all of this Shibboleth thing, so I'm trying to read my way
out of ignorance... but perhaps you can let me know if I understand this
correctly:

The ecp script (I assume you're using the bash script from that link,
I'll probably use the perl one since I'm more comfortable with perl, but
either way) handles the process of doing the authentication, and the
writes the resulting credential to a file which contains a cookie, which
the curl libraries then put in their headers for all subsequent https
requests (given that they know about the file, per your patch to git). 

So to use such a thing, you first would call the ecp script to
authenticate, creating a session (identified by the cookie), and then
you would call git, is that correct?