GitLab配置CAS认证，前端WEB正常. 但是做git clone等操作时报错如下

Question

报错如下：

[root@vmServer11 ~]# git clone http://10.20.104.230/wangjun5/mypro.git
Cloning into 'mypro'...
Username for 'http://10.20.104.230': wangjun5        
Password for 'http://wangjun5@10.20.104.230': 
remote: HTTP Basic: Access denied
fatal: Authentication failed for 'http://10.20.104.230/wangjun5/mypro.git/'

以下是gitlab.rb中omniauth相关的配置

gitlab_rails['omniauth_enabled'] = true
# gitlab_rails['omniauth_allow_single_sign_on'] = true
# gitlab_rails['omniauth_auto_sign_in_with_provider'] = 'saml'
gitlab_rails['omniauth_block_auto_created_users'] = false
# gitlab_rails['omniauth_auto_link_ldap_user'] = false
# gitlab_rails['omniauth_auto_link_saml_user'] = false
# gitlab_rails['omniauth_external_providers'] = ['twitter', 'google_oauth2']
gitlab_rails['omniauth_providers'] = [
  {
        "name"=> "cas3",
        "label"=> "CAS_Server Login",
        "args"=> {
                "url"=> 'http://10.20.104.58',
                "login_url"=> '/cas/login/',
                "service_validate_url"=> '/cas/p3/serviceValidate/',
                "logout_url"=> '/cas/logout/'
        }
  }
]

Answer 1

gitlab的CAS认证只能用于网页登录，clone时仍然使用用户在gitlab的账户密码，与CAS无关。如果使用了单点登录，推荐用户使用ssh-key来操作仓库，不再使用账户密码。