71 lines
2.2 KiB
Perl
Executable file
71 lines
2.2 KiB
Perl
Executable file
#!/usr/bin/perl
|
|
|
|
use strict;
|
|
use warnings;
|
|
|
|
# ------------------------------------------------------------------------------
|
|
|
|
# site-local changes
|
|
|
|
# the original login shell your users had (or) the shell to forward
|
|
# non-gitolite commands to
|
|
my $shell = "/bin/bash";
|
|
# suggested values if you really don't want them actually logging in:
|
|
# /sbin/nologin - obvious
|
|
# /usr/bin/passwd - same, but allows them to change their passwords
|
|
|
|
# the gitolite hosting user you want to forward git commands to. Typically
|
|
# this will be 'git' or perhaps 'gitolite', but actually could be anything
|
|
my $hosting_user = "gitolite-test";
|
|
|
|
# ADCs...
|
|
# either list all the ADCs you wish to allow forwarding to (SPACE-separated):
|
|
my $ADC_list = "";
|
|
# -- OR --
|
|
# if you upgraded to the new 'help' adc with the '-list' option, set this to 1:
|
|
my $detect_ADCs = 0;
|
|
# if you do neither, ADCs are not forwarded
|
|
|
|
# ------------------------------------------------------------------------------
|
|
|
|
# no arguments? nothing to forward
|
|
exec($shell) unless @ARGV;
|
|
|
|
# forward normal git ops
|
|
forward(@ARGV) if
|
|
$ARGV[0] eq '-c' and
|
|
$ARGV[1] =~ /^(git-receive-pack|git-upload-pack|git-upload-archive) '(\S+)'$/ and
|
|
( not -d "$2" );
|
|
|
|
# forward gitolite special commands
|
|
forward(@ARGV) if $ARGV[0] eq '-c' and $ARGV[1] =~ /^(info|expand|((set|get)(perms|desc)))( |$)/;
|
|
|
|
# forward ADCs
|
|
if ($ADC_list or $detect_ADCs) {
|
|
$ADC_list ||= `ssh $hosting_user\@localhost help -list`;
|
|
$ADC_list =~ s/\s+/ /g;
|
|
|
|
# find the command he's running
|
|
my $cmd = $1 if $ARGV[1] =~ /^(\S+)/;
|
|
# forward if the command appears somewhere in the ADC list
|
|
forward(@ARGV) if $ARGV[0] eq '-c' and $cmd and $ADC_list =~ /(^| )$cmd( |$)/;
|
|
}
|
|
|
|
# at this point it's back to local processing
|
|
exec($shell, @ARGV);
|
|
|
|
# ------------------------------------------------------------------------------
|
|
|
|
# forward to the hosting user
|
|
sub forward {
|
|
# this message is important in debugging and trouble shooting; see
|
|
# documentation
|
|
print STDERR "[forwarding to $hosting_user\@localhost]\n";
|
|
|
|
# but first we check for rsa key
|
|
-f ".ssh/id_rsa" or die "ask your admin to add you to gitolite";
|
|
|
|
shift if $_[0] eq '-c';
|
|
exec("ssh", "$hosting_user\@localhost", @_);
|
|
}
|