Mercurial SSO Authentication

1. Status

This extension is not distributed with Mercurial.

Author: Dominik Ruf

Repository: https://bitbucket.org/domruf/hgssoauthentication

Issues: https://bitbucket.org/domruf/hgssoauthentication/issues

2. Overview

This mecurial extension allows you to use single sign-on authenticate with web servers that use NTLM or kerberos authentication.

Either the kerberos or sspi (from pywin32) python packages have to be available in your mecurial installation.

2.1. Example Apache Configuration

mod_auth_sspi

    AuthName "My Login"
    SSPIAuth On
    SSPIAuthoritative On
    SSPIDomain mydomain.com
    SSPIOfferBasic Off
    SSPIOmitDomain On
    SSPIUsernameCase lower
    Require valid-user

mod_auth_kerb

    AuthName "My Login"
    AuthType Kerberos
    Krb5Keytab /etc/apache2/http.keytab
    KrbMethodK5Passwd off
    KrbAuthRealms MYDOMAIN.COM
    KrbVerifyKDC on
    Require valid-user

3. Configuration

Configure your .hgrc to enable the extension by adding following lines:

[extensions]
...
hgssoauthentication=c:\path\to\hgssoauthentication.py

CategoryExtensionsByOthers