List of contributors to Kallithea project:

    Mads Kiilerich <madski@unity3d.com> 2012-2017

    Unity Technologies 2012-2017

    Andrew Shadura <andrew@shadura.me> 2012 2014-2017

    Dominik Ruf <dominikruf@gmail.com> 2012 2014 2016-2017

    Sam Jaques <sam.jaques@me.com> 2015 2017

    Mads Kiilerich <mads@kiilerich.com> 2016-2017

    Ching-Chen Mao <mao@lins.fju.edu.tw> 2017

    FUJIWARA Katsunori <foozy@lares.dti.ne.jp> 2017

    Viktar Vauchkevich <victorenator@gmail.com> 2017

    Takumi IINO <trot.thunder@gmail.com> 2012-2016

    Søren Løvborg <sorenl@unity3d.com> 2015-2016

    Anton Shestakov <av6@dwimlabs.net> 2016

    Brandon Jones <bjones14@gmail.com> 2016

    Konstantin Veretennicov <kveretennicov@gmail.com> 2016

    Robert James Dennington <tinytimrob@googlemail.com> 2016

    Aras Pranckevičius <aras@unity3d.com> 2012-2013 2015

    Sean Farley <sean.michael.farley@gmail.com> 2013-2015

    Christian Oyarzun <oyarzun@gmail.com> 2014-2015

    Joseph Rivera <rivera.d.joseph@gmail.com> 2014-2015

    Michal Čihař <michal@cihar.com> 2014-2015

    Anatoly Bubenkov <bubenkoff@gmail.com> 2015

    Andrew Bartlett <abartlet@catalyst.net.nz> 2015

    Balázs Úr <urbalazs@gmail.com> 2015

    Ben Finney <ben@benfinney.id.au> 2015

    Branko Majic <branko@majic.rs> 2015

    Daniel Hobley <danielh@unity3d.com> 2015

    David Avigni <david.avigni@ankapi.com> 2015

    Denis Blanchette <dblanchette@coveo.com> 2015

    duanhongyi <duanhongyi@doopai.com> 2015

    EriCSN Chang <ericsning@gmail.com> 2015

    Étienne Gilli <etienne.gilli@gmail.com> 2015

    Grzegorz Krason <grzegorz.krason@gmail.com> 2015

    Jan Heylen <heyleke@gmail.com> 2015

    Kazunari Kobayashi <kobanari@nifty.com> 2015

    Kevin Bullock <kbullock@ringworld.org> 2015

    kobanari <kobanari@nifty.com> 2015

    Marc Abramowitz <marc@marc-abramowitz.com> 2015

    Marc Villetard <marc.villetard@gmail.com> 2015

    Matthias Zilk <matthias.zilk@gmail.com> 2015

    Michael Pohl <michael@mipapo.de> 2015

    Michael V. DePalatis <mike@depalatis.net> 2015

    Morten Skaaning <mortens@unity3d.com> 2015

    Nick High <nick@silverchip.org> 2015

    Niemand Jedermann <predatorix@web.de> 2015

    Peter Vitt <petervitt@web.de> 2015

    Robert Martinez <ntttq@inboxen.org> 2015

    Robert Rauch <mail@robertrauch.de> 2015

    Ronny Pfannschmidt <opensource@ronnypfannschmidt.de> 2015

    Tuux <tuxa@galaxie.eu.org> 2015

    Viktar Palstsiuk <vipals@gmail.com> 2015

    Bradley M. Kuhn <bkuhn@sfconservancy.org> 2014

    Calinou <calinou@opmbx.org> 2014

    Daniel Anderson <daniel@dattrix.com> 2014

    Henrik Stuart <hg@hstuart.dk> 2014

    Ingo von Borstel <kallithea@planetmaker.de> 2014

    Jelmer Vernooij <jelmer@samba.org> 2014

    Jim Hague <jim.hague@acm.org> 2014

    Matt Fellows <kallithea@matt-fellows.me.uk> 2014

    Max Roman <max@choloclos.se> 2014

    Na'Tosha Bard <natosha@unity3d.com> 2014

    Rasmus Selsmark <rasmuss@unity3d.com> 2014

    Tim Freund <tim@freunds.net> 2014

    Travis Burtrum <android@moparisthebest.com> 2014

    Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com> 2014

    Marcin Kuźmiński <marcin@python-works.com> 2010-2013

    xpol <xpolife@gmail.com> 2012-2013

    Aparkar <aparkar@icloud.com> 2013

    Dennis Brakhane <brakhane@googlemail.com> 2013

    Grzegorz Rożniecki <xaerxess@gmail.com> 2013

    Jonathan Sternberg <jonathansternberg@gmail.com> 2013

    Leonardo Carneiro <leonardo@unity3d.com> 2013

    Magnus Ericmats <magnus.ericmats@gmail.com> 2013

    Martin Vium <martinv@unity3d.com> 2013

    Simon Lopez <simon.lopez@slopez.org> 2013

    Ton Plomp <tcplomp@gmail.com> 2013

    Augusto Herrmann <augusto.herrmann@planejamento.gov.br> 2011-2012

    Dan Sheridan <djs@adelard.com> 2012

    Dies Koper <diesk@fast.au.fujitsu.com> 2012

    Erwin Kroon <e.kroon@smartmetersolutions.nl> 2012

    H Waldo G <gwaldo@gmail.com> 2012

    hppj <hppj@postmage.biz> 2012

    Indra Talip <indra.talip@gmail.com> 2012

    mikespook 2012

    nansenat16 <nansenat16@null.tw> 2012

    Philip Jameson <philip.j@hostdime.com> 2012

    Raoul Thill <raoul.thill@gmail.com> 2012

    Stefan Engel <mail@engel-stefan.de> 2012

    Tony Bussieres <t.bussieres@gmail.com> 2012

    Vincent Caron <vcaron@bearstech.com> 2012

    Vincent Duvert <vincent@duvert.net> 2012

    Vladislav Poluhin <nuklea@gmail.com> 2012

    Zachary Auclair <zach101@gmail.com> 2012

    Ankit Solanki <ankit.solanki@gmail.com> 2011

    Dmitri Kuznetsov 2011

    Jared Bunting <jared.bunting@peachjean.com> 2011

    Jason Harris <jason@jasonfharris.com> 2011

    Les Peabody <lpeabody@gmail.com> 2011

    Liad Shani <liadff@gmail.com> 2011

    Lorenzo M. Catucci <lorenzo@sancho.ccd.uniroma2.it> 2011

    Matt Zuba <matt.zuba@goodwillaz.org> 2011

    Nicolas VINOT <aeris@imirhil.fr> 2011

    Shawn K. O'Shea <shawn@eth0.net> 2011

    Thayne Harbaugh <thayne@fusionio.com> 2011

    Łukasz Balcerzak <lukaszbalcerzak@gmail.com> 2010

    Andrew Kesterson <andrew@aklabs.net>

    cejones

    David A. Sjøen <david.sjoen@westcon.no>

    James Rhodes <jrhodes@redpointsoftware.com.au>

    Jonas Oberschweiber <jonas.oberschweiber@d-velop.de>

    larikale

    RhodeCode GmbH

    Sebastian Kreutzberger <sebastian@rhodecode.com>

    Steve Romanow <slestak989@gmail.com>

    SteveCohen

    Thomas <thomas@rhodecode.com>

    Thomas Waldmann <tw-public@gmx.de>

.. _installation_iis:

=====================================================================

Installing Kallithea on Microsoft Internet Information Services (IIS)

=====================================================================

The following is documented using IIS 7/8 terminology. There should be nothing

preventing you from applying this on IIS 6 well.

.. note::

    Installing Kallithea under IIS can enable Single Sign-On to the Kallithea

    web interface from web browsers that can authenticate to the web server.

    (As an alternative to IIS, SSO is also possible with for example Apache and

    mod_sspi.)

    Mercurial and Git do however by default not support SSO on the client side

    and will still require some other kind of authentication.

    (An extension like hgssoauthentication_ might solve that.)

.. note::

    For the best security, it is strongly recommended to only host the site over

    a secure connection, e.g. using TLS.

Prerequisites

-------------

Apart from the normal requirements for Kallithea, it is also necessary to get an

ISAPI-WSGI bridge module, e.g. isapi-wsgi.

Installation

------------

The following assumes that your Kallithea is at ``c:\inetpub\kallithea``, and

will be served from the root of its own website. The changes to serve it in its

own virtual folder will be noted where appropriate.

Application pool

................

Make sure that there is a unique application pool for the Kallithea application

with an identity that has read access to the Kallithea distribution.

The application pool does not need to be able to run any managed code. If you

are using a 32-bit Python installation, then you must enable 32-bit program in

the advanced settings for the application pool; otherwise Python will not be able

to run on the website and neither will Kallithea.

.. note::

    The application pool can be the same as an existing application pool,

    as long as the Kallithea requirements are met by the existing pool.

ISAPI handler

.............

The ISAPI handler can be generated using::

    paster install-iis my.ini --virtualdir=/

This will generate a ``dispatch.py`` file in the current directory that contains

the necessary components to finalize an installation into IIS. Once this file

has been generated, it is necessary to run the following command due to the way

that ISAPI-WSGI is made::

    python2 dispatch.py install

This accomplishes two things: generating an ISAPI compliant DLL file,

``_dispatch.dll``, and installing a script map handler into IIS for the

``--virtualdir`` specified above pointing to ``_dispatch.dll``.

The ISAPI handler is registered to all file extensions, so it will automatically

be the one handling all requests to the specified virtual directory. When the website starts

the ISAPI handler, it will start a thread pool managed wrapper around the paster

middleware WSGI handler that Kallithea runs within and each HTTP request to the

site will be processed through this logic henceforth.

Authentication with Kallithea using IIS authentication modules

..............................................................

The recommended way to handle authentication with Kallithea using IIS is to let

IIS handle all the authentication and just pass it to Kallithea.

.. note::

    As an alternative without SSO, you can also use LDAP authentication with

    Active Directory, see :ref:`ldap-setup`.

To move responsibility into IIS from Kallithea, we need to configure Kallithea

to let external systems handle authentication and then let Kallithea create the

user automatically. To do this, access the administration's authentication page

and enable the ``kallithea.lib.auth_modules.auth_container`` plugin. Once it is

added, enable it with the ``REMOTE_USER`` header and check *Clean username*.

Finally, save the changes on this page.

Switch to the administration's permissions page and disable anonymous access,

otherwise Kallithea will not attempt to use the authenticated user name. By

default, Kallithea will populate the list of users lazily as they log in. Either

disable external auth account activation and ensure that you pre-populate the

user database with an external tool, or set it to *Automatic activation of

external account*. Finally, save the changes.

The last necessary step is to enable the relevant authentication in IIS, e.g.

Windows authentication.

Troubleshooting

---------------

Typically, any issues in this setup will either be entirely in IIS or entirely

in Kallithea (or Kallithea's WSGI/paster middleware). Consequently, two

different options for finding issues exist: IIS' failed request tracking which

is great at finding issues until they exist inside Kallithea, at which point the

ISAPI-WSGI wrapper above uses ``win32traceutil``, which is part of ``pywin32``.

In order to dump output from WSGI using ``win32traceutil`` it is sufficient to

type the following in a console window::

    python2 -m win32traceutil

and any exceptions occurring in the WSGI layer and below (i.e. in the Kallithea

application itself) that are uncaught, will be printed here complete with stack

traces, making it a lot easier to identify issues.

## -*- coding: utf-8 -*-

<%inherit file="/base/base.html"/>

<%block name="title">

    ${_('About')}

</%block>

<%def name="breadcrumbs()">

    ${c.site_name}

</%def>

<%block name="header_menu">

    ${self.menu('about')}

</%block>

<%def name="main()">

<div class="box">

  <!-- box / title -->

  <div class="title">

    <h5>${_('About')} Kallithea</h5>

  </div>

  <p><a href="https://kallithea-scm.org/">Kallithea</a> is a project of the

  <a href="http://sfconservancy.org/">Software Freedom Conservancy, Inc.</a>

  and is released under the terms of the

  <a href="http://www.gnu.org/copyleft/gpl.html">GNU General Public License,

  v 3.0 (GPLv3)</a>.</p>

  <p>Kallithea is copyrighted by various authors, including but not

  necessarily limited to the following:

  <ul style="margin: 0 0 0 50px;">

  <li>Copyright &copy; 2012&ndash;2017, Mads Kiilerich</li>

  <li>Copyright &copy; 2012&ndash;2017, Unity Technologies</li>

  <li>Copyright &copy; 2012, 2014&ndash;2017, Andrew Shadura</li>

  <li>Copyright &copy; 2012, 2014, 2016&ndash;2017, Dominik Ruf</li>

  <li>Copyright &copy; 2015, 2017, Sam Jaques</li>

  <li>Copyright &copy; 2017, Ching-Chen Mao</li>

  <li>Copyright &copy; 2017, FUJIWARA Katsunori</li>

  <li>Copyright &copy; 2017, Viktar Vauchkevich</li>

  <li>Copyright &copy; 2012&ndash;2016, Takumi IINO</li>

  <li>Copyright &copy; 2015&ndash;2016, Søren Løvborg</li>

  <li>Copyright &copy; 2016, Anton Shestakov</li>

  <li>Copyright &copy; 2016, Brandon Jones</li>

  <li>Copyright &copy; 2016, Konstantin Veretennicov</li>

  <li>Copyright &copy; 2016, Robert James Dennington</li>

  <li>Copyright &copy; 2012&ndash;2013, 2015, Aras Pranckevičius</li>

  <li>Copyright &copy; 2014&ndash;2015, Christian Oyarzun</li>

  <li>Copyright &copy; 2014&ndash;2015, Joseph Rivera</li>

  <li>Copyright &copy; 2014&ndash;2015, Michal Čihař</li>

  <li>Copyright &copy; 2014&ndash;2015, Sean Farley</li>

  <li>Copyright &copy; 2015, Anatoly Bubenkov</li>

  <li>Copyright &copy; 2015, Andrew Bartlett</li>

  <li>Copyright &copy; 2015, Balázs Úr</li>

  <li>Copyright &copy; 2015, Ben Finney</li>

  <li>Copyright &copy; 2015, Branko Majic</li>

  <li>Copyright &copy; 2015, Daniel Hobley</li>

  <li>Copyright &copy; 2015, David Avigni</li>

  <li>Copyright &copy; 2015, Denis Blanchette</li>

  <li>Copyright &copy; 2015, duanhongyi</li>

  <li>Copyright &copy; 2015, EriCSN Chang</li>

  <li>Copyright &copy; 2015, Étienne Gilli</li>

  <li>Copyright &copy; 2015, Grzegorz Krason</li>

  <li>Copyright &copy; 2015, Jan Heylen</li>

  <li>Copyright &copy; 2015, Kazunari Kobayashi</li>

  <li>Copyright &copy; 2015, Kevin Bullock</li>

  <li>Copyright &copy; 2015, kobanari</li>

  <li>Copyright &copy; 2015, Marc Abramowitz</li>

  <li>Copyright &copy; 2015, Marc Villetard</li>

  <li>Copyright &copy; 2015, Matthias Zilk</li>

  <li>Copyright &copy; 2015, Michael Pohl</li>

  <li>Copyright &copy; 2015, Michael V. DePalatis</li>

  <li>Copyright &copy; 2015, Morten Skaaning</li>

  <li>Copyright &copy; 2015, Nick High</li>

  <li>Copyright &copy; 2015, Niemand Jedermann</li>

  <li>Copyright &copy; 2015, Peter Vitt</li>

  <li>Copyright &copy; 2015, Robert Martinez</li>

  <li>Copyright &copy; 2015, Robert Rauch</li>

  <li>Copyright &copy; 2015, Ronny Pfannschmidt</li>

  <li>Copyright &copy; 2015, Tuux</li>

  <li>Copyright &copy; 2015, Viktar Palstsiuk</li>

  <li>Copyright &copy; 2014, Bradley M. Kuhn</li>

  <li>Copyright &copy; 2014, Calinou</li>

  <li>Copyright &copy; 2014, Daniel Anderson</li>

  <li>Copyright &copy; 2014, Henrik Stuart</li>

  <li>Copyright &copy; 2014, Ingo von Borstel</li>

  <li>Copyright &copy; 2014, Jelmer Vernooij</li>

  <li>Copyright &copy; 2014, Jim Hague</li>

  <li>Copyright &copy; 2014, Matt Fellows</li>

  <li>Copyright &copy; 2014, Max Roman</li>

  <li>Copyright &copy; 2014, Na'Tosha Bard</li>

  <li>Copyright &copy; 2014, Rasmus Selsmark</li>

  <li>Copyright &copy; 2014, Tim Freund</li>

  <li>Copyright &copy; 2014, Travis Burtrum</li>

  <li>Copyright &copy; 2014, Zoltan Gyarmati</li>

  <li>Copyright &copy; 2010&ndash;2013, Marcin Kuźmiński</li>

  <li>Copyright &copy; 2010&ndash;2013, RhodeCode GmbH</li>

  <li>Copyright &copy; 2011, 2013, Aparkar</li>

  <li>Copyright &copy; 2012&ndash;2013, xpol</li>

  <li>Copyright &copy; 2013, Dennis Brakhane</li>

  <li>Copyright &copy; 2013, Grzegorz Rożniecki</li>

  <li>Copyright &copy; 2013, Jonathan Sternberg</li>

  <li>Copyright &copy; 2013, Leonardo Carneiro</li>

  <li>Copyright &copy; 2013, Magnus Ericmats</li>

  <li>Copyright &copy; 2013, Martin Vium</li>

  <li>Copyright &copy; 2013, Simon Lopez</li>

  <li>Copyright &copy; 2011&ndash;2012, Augusto Herrmann</li>

  <li>Copyright &copy; 2012, Dan Sheridan</li>

  <li>Copyright &copy; 2012, H Waldo G</li>

  <li>Copyright &copy; 2012, hppj</li>

  <li>Copyright &copy; 2012, Indra Talip</li>

  <li>Copyright &copy; 2012, mikespook</li>

  <li>Copyright &copy; 2012, nansenat16</li>

  <li>Copyright &copy; 2012, Philip Jameson</li>

  <li>Copyright &copy; 2012, Raoul Thill</li>

  <li>Copyright &copy; 2012, Tony Bussieres</li>

  <li>Copyright &copy; 2012, Vincent Duvert</li>

  <li>Copyright &copy; 2012, Vladislav Poluhin</li>

  <li>Copyright &copy; 2012, Zachary Auclair</li>

  <li>Copyright &copy; 2011, Ankit Solanki</li>

  <li>Copyright &copy; 2011, Dmitri Kuznetsov</li>

  <li>Copyright &copy; 2011, Jared Bunting</li>

  <li>Copyright &copy; 2011, Jason Harris</li>

  <li>Copyright &copy; 2011, Les Peabody</li>

  <li>Copyright &copy; 2011, Liad Shani</li>

  <li>Copyright &copy; 2011, Lorenzo M. Catucci</li>

  <li>Copyright &copy; 2011, Matt Zuba</li>

  <li>Copyright &copy; 2011, Nicolas VINOT</li>

  <li>Copyright &copy; 2011, Shawn K. O'Shea</li>

  <li>Copyright &copy; 2010, Łukasz Balcerzak</li>

## We did not list the following copyright holders, given that they appeared

## to use for-profit company affiliations in their contribution in the

## Mercurial log and therefore I didn't know if copyright was theirs or

## their company's.

## Copyright &copy; 2011 Thayne Harbaugh <thayne@fusionio.com>

## Copyright &copy; 2012 Dies Koper <diesk@fast.au.fujitsu.com>

## Copyright &copy; 2012 Erwin Kroon <e.kroon@smartmetersolutions.nl>

## Copyright &copy; 2012 Vincent Caron <vcaron@bearstech.com>

##

## These contributors' contributions may not be copyrightable:

## philip.j@hostdime.com in 2012

## Stefan Engel <mail@engel-stefan.de> in 2012

## Ton Plomp <tcplomp@gmail.com> in 2013

##

</ul></p>

<p>The above are the copyright holders who have submitted direct

  contributions to the Kallithea repository.  In

  the <a href="https://kallithea-scm.org/repos/kallithea">Kallithea source

  code</a>, there is

  a <a href="https://kallithea-scm.org/repos/kallithea/files/tip/LICENSE.md">list

  of third-party libraries and code that Kallithea incorporates</a>.</p>

</div>

</%def>