Any chance lfs could use negotiate authentication in addition to basic auth? We use kerberos/sso in front of our GIT server and we currently can't utilize lfs for this reason. When the lfs authentication happens, it just fails as it won't retry authentication with a different method. This would be similar to the fix in the GIT bug:
git/git@4dbe664