Skip to content

Add internal API support for Kerberos authentication in gitlab-sshd

What does this MR do and why?

This MR add internal API support for authenticating request from gitlab-sshd with a Kerberos principal in addition to the other available fields (username and key_id)

In conjunction with gitlab-shell!682 (merged), it allows one to clone git repositories over SSH with a Kerberos ticket instead of an SSH key.

Related to gitlab-shell#196 (closed)

Screenshots or screen recordings

Not applicable

How to set up and validate locally

  1. Follow the instructions in gitlab-shell!682 (merged)
  2. Try to clone a repository

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Drew Blessing

Merge request reports