<div class="gmail_quote">On Wed, May 29, 2013 at 10:55 PM, William Muriithi <<a href="mailto:william.muriithi@gmail.com" target="_blank">william.muriithi@gmail.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Hello I have set up gitolite3 and its working fine when I connect to it through ssh. I am using LDAP (FreeIPA) for authorization. When I connect through http/https, I am authenticated, but I believe authorization is not working. I have not been able to figure how to work around it.. git clone <a href="http://william@git1.example.com/git/Design.git" target="_blank">http://william@git1.example.com/git/Design.git</a> But after Apache authenticate me, it passes william@EXAMPLE.LOC not william to gitolite. When the name william@EXAMPLE.LOC is passed to the group searching script, it returns null and hence the error below </blockquote><div> I could not find it in the docs, but according to <a href="http://serverfault.com/questions/35363/apache-mod-auth-kerb-and-ldap-user-groups">http://serverfault.com/questions/35363/apache-mod-auth-kerb-and-ldap-user-groups</a> you can do that with KrbLocalUserMapping On in your apache config. I have not tested it ;-) -- groet, natxo </div></div>