Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an apache2 server running a virtual host with HTTPS and basic authentication enabled. The virtual host serves GIT repositories via gitweb script. Authenticated users pull repositories from virtual host.

I don't need fine access control since I am using basic authentication mechanism. Therefore, my questions are:

Q1) Is gitweb the only thing I need to pull AND push changes with this setup ?

Q2) If not enough, do I need gitolite or gitosis to push changes ?

share|improve this question
up vote 4 down vote accepted

gitweb is only a vizualization mechanism. You don't need it to pull/push.
A simple Apache server calling the git-http-backend mechanism is enough.

Gitolite (please, no gitosis: it is obsolete) is an authorization mechanism, also not needed to push/pull (unless you want to restrict access to a group of users).

More details in:

share|improve this answer
-To push/pull (via Smart HTTP protocol), only git-http-backend is required. -To view/restrict/enable user access; gitweb or gitolite is required. Am I right ? – David Andreoletti Jan 27 '12 at 9:44
@DavidAndreoletti: to view, just gitweb is required. Gitolite is only there to intercept any git command and accept or deny said command based on the user requiring access to a repo through that command. You can interface gitweb with Gitolite if you want your visualization interface to benefit from the authorization layer: – VonC Jan 27 '12 at 9:54
In my setup, authorization layer is managed by Apache's Basic Authentication mechanism. – David Andreoletti Jan 27 '12 at 10:07
@DavidAndreoletti: nope: Apache's Basic Authentication, as its name suggests, is for authentication, NOT (I repeat not) authorization. Please read: – VonC Jan 27 '12 at 10:12

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.