gerrit/gerrit-gwtui-common
Hector Oswaldo Caballero d0bf015308 Allow HTTP password when using LDAP and basic authentication
So far, it was not possible to use HTTP password to validate git over
HTTP and REST API requests if LDAP was used along with HTTP basic
authentication. There is a use case, though, where users do not want to
use their LDAP password for the aforementioned requests as in, for
example, automation scripts.

Introduce a new configuration parameter, `gitBasicAuthPolicy`, to allow
LDAP users to authenticate using either the HTTP or the LDAP passwords
when doing git over HTTP and REST API requests. When this new parameter
is set to LDAP, the password in the request is checked against the LDAP
password only. When set to HTTP, the password is validated against the
randomly generated HTTP password. Finally, when set to HTTP_LDAP, the
password in the request is checked first against the HTTP password and,
if it does not match, it is checked against the LDAP password.

If the new parameter is not specified or if is set to LDAP, the current
behavior is preserved, i.e., only LDAP password is allowed when using
basic authentication.

Change-Id: I8846cd89dfdb98ab2fc36ba754d8302cf40527e9
2017-01-12 11:45:30 +00:00
..
src Allow HTTP password when using LDAP and basic authentication 2017-01-12 11:45:30 +00:00
BUCK Clarify that the CC-BY 3.0 license is the unported version 2016-09-21 11:19:22 +02:00