Back to bug 1369173

Who When What Removed Added
Kamil Dudka 2016-08-22 15:11:28 UTC Depends On 1359176
Filip Krska 2016-11-29 09:51:34 UTC Blocks 1298243
Leos Pol 2016-11-30 13:33:14 UTC CC lpol
Leos Pol 2016-12-05 09:07:01 UTC CC lpol
Blocks 1400961
Ondrej Vasik 2016-12-16 15:12:48 UTC Blocks 1393870
Petr Stodulka 2016-12-19 13:07:15 UTC Doc Text Cause: Since libcurl v7.21.7 is requested new paramater for delegation of kerberos ticket because of CVE-2011-2192. Git didn't provide any way to setting of that option, so delegation wasn't possible.

Consequence: Using of git with HTTP(S) and SSO wasn't possible.

Fix: Git provides new configuration variable http.delegation which corresponds to curl parameter "--delegation" (see man 1 curl). User need to set the parameter when delegation of kerberos ticket is required.


Result: Git can be used with combination HTTP(S) and SSO again.
Doc Type If docs needed, set a value Bug Fix
Ondrej Vasik 2017-01-10 14:33:24 UTC CC ovasik
Petr Stodulka 2017-01-27 14:19:27 UTC Status NEW ASSIGNED
Petr Stodulka 2017-02-28 14:18:45 UTC Status ASSIGNED MODIFIED
Fixed In Version git-1.8.3.1-9.el7
errata-xmlrpc 2017-02-28 14:30:38 UTC Status MODIFIED ON_QA
Robin Hack 2017-03-08 12:03:27 UTC CC rhack
Flags needinfo?(pstodulk)
Robin Hack 2017-03-09 11:49:11 UTC Status ON_QA VERIFIED
QA Contact qe-baseos-daemons rhack
Petr Stodulka 2017-03-09 11:55:40 UTC Flags needinfo?(pstodulk)
Petr Stodulka 2017-03-14 15:38:10 UTC Doc Type Bug Fix Release Note
Lenka Špačková 2017-04-11 14:02:23 UTC Docs Contact lkuprova
Lenka Špačková 2017-05-17 12:17:21 UTC Doc Text Cause: Since libcurl v7.21.7 is requested new paramater for delegation of kerberos ticket because of CVE-2011-2192. Git didn't provide any way to setting of that option, so delegation wasn't possible.

Consequence: Using of git with HTTP(S) and SSO wasn't possible.

Fix: Git provides new configuration variable http.delegation which corresponds to curl parameter "--delegation" (see man 1 curl). User need to set the parameter when delegation of kerberos ticket is required.


Result: Git can be used with combination HTTP(S) and SSO again.
*Git* can now be used with HTTP or HTTPS and SSO

Since *libcurl* version 7.21.7, a new paramater for delegating Kerberos tickets is required because of CVE-2011-2192. Previously, *Git* did not provide a way to set such a parameter. As a consequence, using *Git* with HTTP or HTTPS and Single Sign-On (SSO) was impossible. With this update, *Git* provides a new `http.delegation` configuration variable, which corresponds to the cURL `--delegation` parameter. Users need to set this parameter when delegation of Kerberos tickets is required.
Lenka Špačková 2017-05-22 16:04:43 UTC Doc Text *Git* can now be used with HTTP or HTTPS and SSO

Since *libcurl* version 7.21.7, a new paramater for delegating Kerberos tickets is required because of CVE-2011-2192. Previously, *Git* did not provide a way to set such a parameter. As a consequence, using *Git* with HTTP or HTTPS and Single Sign-On (SSO) was impossible. With this update, *Git* provides a new `http.delegation` configuration variable, which corresponds to the cURL `--delegation` parameter. Users need to set this parameter when delegation of Kerberos tickets is required.
*Git* can now be used with HTTP or HTTPS and SSO

Since *libcurl* version 7.21.7, a new paramater for delegating Kerberos tickets is required because of CVE-2011-2192. Previously, *Git* did not provide a way to set such a parameter. As a consequence, using *Git* with Single Sign-On on HTTP or HTTPS connections failed. With this update, *Git* provides a new `http.delegation` configuration variable, which corresponds to the cURL `--delegation` parameter. Users need to set this parameter when delegation of Kerberos tickets is required.
errata-xmlrpc 2017-08-01 20:52:19 UTC Status VERIFIED CLOSED
Resolution --- ERRATA
Last Closed 2017-08-01 16:52:19 UTC
Pasi Karkkainen 2017-08-02 07:32:19 UTC CC pasik

Back to bug 1369173