Back to bug 1368384

Who When What Removed Added
Kamil Dudka 2016-08-22 15:10:21 UTC Depends On 1369173
Kamil Dudka 2016-08-22 15:11:28 UTC Depends On 1359176
Ondrej Vasik 2016-09-16 13:51:40 UTC CC ovasik
Ondrej Vasik 2016-09-16 15:55:16 UTC Doc Text TBD
Cause:

Consequence:

Workaround (if any):

Result:
Doc Type If docs needed, set a value Known Issue
Petr Stodulka 2016-09-30 07:37:26 UTC Status NEW ASSIGNED
Frantisek Sumsal 2016-12-05 16:09:10 UTC CC fsumsal
Lenka Špačková 2016-12-07 10:11:42 UTC Docs Contact lkuprova
Petr Stodulka 2016-12-07 23:51:50 UTC Status ASSIGNED MODIFIED
Fixed In Version git-1.7.1-8.el6
errata-xmlrpc 2016-12-07 23:52:58 UTC Status MODIFIED ON_QA
Petr Stodulka 2016-12-19 13:06:43 UTC Doc Text TBD
Cause:

Consequence:

Workaround (if any):

Result:
Cause: Since libcurl v7.21.7 is requested new paramater for delegation of kerberos ticket because of CVE-2011-2192. Git didn't provide any way to setting of that option, so delegation wasn't possible.

Consequence: Using of git with HTTP(S) and SSO wasn't possible.

Fix: Git provides new configuration variable http.delegation which corresponds to curl parameter "--delegation" (see man 1 curl). User need to set the parameter when delegation of kerberos ticket is required.


Result: Git can be used with combination HTTP(S) and SSO again.
Lenka Špačková 2016-12-21 16:48:53 UTC Doc Text Cause: Since libcurl v7.21.7 is requested new paramater for delegation of kerberos ticket because of CVE-2011-2192. Git didn't provide any way to setting of that option, so delegation wasn't possible.

Consequence: Using of git with HTTP(S) and SSO wasn't possible.

Fix: Git provides new configuration variable http.delegation which corresponds to curl parameter "--delegation" (see man 1 curl). User need to set the parameter when delegation of kerberos ticket is required.


Result: Git can be used with combination HTTP(S) and SSO again.
*Git* can now be used with HTTP or HTTPS and SSO

Since *libcurl* version 7.19.7-30, a new paramater for delegating Kerberos tickets is required because of CVE-2011-2192. Previously, *Git* did not provide a way to set such a parameter. As a consequence, using *Git* with HTTP or HTTPS and Single Sign-On (SSO) was impossible. With this update, *Git* provides a new `http.delegation` configuration variable, which corresponds to the cURL `--delegation` parameter. Users need to set this parameter when delegation of Kerberos tickets is required.
Doc Type Known Issue Bug Fix
Andrej Dzilský 2017-02-10 12:38:10 UTC Status ON_QA VERIFIED
CC adzilsky
QA Contact qe-baseos-daemons adzilsky
Petr Stodulka 2017-03-09 12:26:55 UTC Blocks 1430723
errata-xmlrpc 2017-03-21 00:48:51 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2017-03-21 10:01:18 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2017-03-21 06:01:18 UTC

Back to bug 1368384