Add an Apache htpasswd user service

Add a new class, HtpasswdUserService, which performs authentication
against a text file created with the Apache 'htpasswd' program.

Added dependency on commons-codec:1.7

1 files changed, 33 insertions, 0 deletions

diff --git a/src/main/distrib/data/gitblit.properties b/src/main/distrib/data/gitblit.properties
index 770bd39d..9be7f645 100644
--- a/src/main/distrib/data/gitblit.properties
+++ b/src/main/distrib/data/gitblit.properties
@@ -502,6 +502,7 @@ web.projectsFile = ${baseFolder}/projects.conf
 #    com.gitblit.SalesforceUserService

 #    com.gitblit.WindowsUserService

 #    com.gitblit.PAMUserService

+#    com.gitblit.HtpasswdUserService

 #

 # Any custom user service implementation must have a public default constructor.

 #

@@ -1233,6 +1234,38 @@ realm.pam.backingUserService = ${baseFolder}/users.conf
 # SINCE 1.3.1

 realm.pam.serviceName = system-auth

 

+# The HtpasswdUserService must be backed by another user service for standard user

+# and team management and attributes. This can be one of the local Gitblit user services.

+# default: users.conf

+#

+# RESTART REQUIRED

+# BASEFOLDER

+# SINCE 1.3.2

+realm.htpasswd.backingUserService = ${baseFolder}/users.conf

+

+# The Apache htpasswd file that contains the users and passwords.

+# default: ${baseFolder}/htpasswd

+#

+# RESTART REQUIRED

+# BASEFOLDER

+# SINCE 1.3.2

+realm.htpasswd.userfile = ${baseFolder}/htpasswd

+

+#  Determines how accounts are looked up upon login.

+#

+# If set to false, then authentication for local accounts is done against

+# the backing user service.

+# If set to true, then authentication will first be checked against the

+# htpasswd store, even if the account appears as a local account in the

+# backing user service. If the user is found in the htpasswd store, then

+# an already existing local account will be turned into an external account.

+# In this case an initial local password is never used and gets overwritten

+# by the externally stored password upon login.

+# default: false

+#

+# SINCE 1.3.2

+realm.htpasswd.overrideLocalAuthentication = false

+

 # The SalesforceUserService must be backed by another user service for standard user

 # and team management.

 # default: users.conf