gitosis gssapi wrapper: map kerberos principal to gitosis user

gitosis-serve-krb5

#!/bin/bash
# gitosis-serve-krb5
#
# map kerberos principal to gitosis user (and strip @REALM.COM)
#
# [/etc/ssh/sshd_config]
# Match User git
#    ForceCommand gitosis-serve-krb5

klist=`klist -5`
if [[ $? -eq 0 ]]; then
    user=`klist -5 2>/dev/null | awk '/Default principal:/ {print $3}' | cut -d@ -f1`
    if [[ ! -z "$user" ]]; then
        exec gitosis-serve $user
    fi
fi