#pragma section-numbers 2
= Mercurial SSO Authentication =

<<TableOfContents>>

== Status ==

'''This extension is not distributed with Mercurial.'''

''Author: '' ''Dominik Ruf''

Repository: ''https://bitbucket.org/domruf/hgssoauthentication''

Issues: ''https://bitbucket.org/domruf/hgssoauthentication/issues''

== Overview ==

This mecurial extension allows you to use single sign-on authenticate with
web servers that use NTLM or kerberos authentication.

Either the kerberos or sspi (from pywin32) python packages have to be
available in your mecurial installation. 

=== Example Apache Configuration ===

mod_auth_sspi
{{{
    AuthName "My Login"
    SSPIAuth On
    SSPIAuthoritative On
    SSPIDomain mydomain.com
    SSPIOfferBasic Off
    SSPIOmitDomain On
    SSPIUsernameCase lower
    Require valid-user
}}}
    
mod_auth_kerb
{{{
    AuthName "My Login"
    AuthType Kerberos
    Krb5Keytab /etc/apache2/http.keytab
    KrbMethodK5Passwd off
    KrbAuthRealms MYDOMAIN.COM
    KrbVerifyKDC on
    Require valid-user
}}}
== Configuration ==
Configure your .hgrc to enable the extension by adding following lines:

{{{
[extensions]
...
hgssoauthentication=c:\path\to\hgssoauthentication.py
}}}

----
CategoryExtensionsByOthers