My company has a bunch of git repos in a folder which has access control through our active directory domain. So far the folder has been accessed via smb using kerberos authentication and all of our clients are set up with file:// urls.
This is obviously very bad. I'm trying to get us set up with a proper git server either over http or over ssh but our network administrator is very clear that whatever solution we pursue has to maintain the active directory group based permissions (with preference to maintaining file level permissions), and that the company isn't willing to pay for a solution. Unfortunately these requirements tie my hands a bit and keep me from using my previously tried and true nginx git bundle.
I've done some research, but I'm really having a hard time putting the pieces together. Does anyone know of (or can point me in the right direction of) a solution which accomplishes:
- Serving git via a standard protocol (http/https/ssh preferred) instead of file protocol
- Authenticating all users against active directory
- Free (open source preferred)
- Runs on Windows (our network administrator is not comfortable with unix).
- Ideally will accept kerberos tickets to allow single sign on.
- Ideally will authenticate users against the folder permissions of the repository instead of separate group based permission configuration (network administrator doesn't want any more work maintaining this).
[Edit: added forgotten requirement regarding OS]
[Edit over a year later]
I am leaving this question here because it got some upvotes, so apparently there are other people who have had similar needs. Any and all answers which partially meet this list might be helpful to future readers. My own problems have been solved by us getting a new System Administrator who isn't afraid of linux freeing me to leverage many more options.