How to get github-like behaviour for ssh access on my git server

Question

Suppose we have two separate github users: Foo and Bar. They own Quux and Waldo repositories respectively. So Foo can push to Foo/Quux and cannot push to Bar/Waldo. Opposite is right for Bar. Then Foo cloned his Quux repository:

$ git clone ...
...
$ git remote -v
origin  [email protected]:Foo/Quux.git (fetch)
origin  [email protected]:Foo/Quux.git (push)

Seems while Foo has write access to Foo/Quux repository via git user he has not write access to Bar/Waldo repository via same user. Is there any way I can reach the same behaviour on my git server? Am I supposed to write custom sshd daemon for this purpose?

joschi · Accepted Answer · 2011-12-11 17:27:49Z

7

You could use Gitolite to get fine-grained access control to your git repositories over SSH where every user is identified by her SSH key.

In contrast to the already mentioned gitosis, Gitolite is still maintained and supports a more fine-grained control over the repository access.

If you want more of GitHub's functionality internally you should take a look at GitLab and of course GitHub Enterprise.

answered Dec 11, 2011 at 17:27

joschi

13.1k4 gold badges46 silver badges51 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

sateesh · Accepted Answer · 2011-12-11 16:32:44Z

1

You can use gitosis for fine grained access control to multiple repositories being shared across a team.

answered Dec 11, 2011 at 16:32

sateesh

28.9k7 gold badges38 silver badges45 bronze badges

1 Comment

Nic Over a year ago

gitosis hasn't been updated in years - gitolite is the community-accepted alternative.

tpg2114 · Accepted Answer · 2011-12-11 16:27:47Z

0

If the repositories are on the same server, there is no way to distinguish two users with the same username. Even a custom sshd wouldn't work because it would see the incoming connection for user "git" only, not the original username.

We manage our permissions with either usernames or groups. So some users belong to the "developers" group that can push to certain repositories and others belong to "users" which can push to other repositories. Each user logs in with his/her own username.

answered Dec 11, 2011 at 16:27

tpg2114

15.3k6 gold badges45 silver badges58 bronze badges

3 Comments

joschi Over a year ago

"If the repositories are on the same server, there is no way to distinguish two users with the same username." - You can still use different SSH keys to distinguish the users like GitHub, gitosis, and Gitolite do.

jørgensen Over a year ago

Relying on ssh keys is not always feasible (like when you don't have yours with you). Sourceforge.net also goes the username route, in fact, it even uses a special notation ("user,[email protected]") to enable roles.

Václav Slavík Over a year ago

Using usernames has a serious problem: it makes the URL of the repository different for each user. This is a show-stopper when using submodules, for example, and I bet is the main reason why GitHub and others use ssh keys.

Collectives™ on Stack Overflow

How to get github-like behaviour for ssh access on my git server

3 Answers 3

Comments

1 Comment

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

1 Comment

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related