Login | Register
My pages Projects Community openCollabNet

Discussions > users [DISABLED] > svn+spnego+require ldap-group

subversion
Discussion topic

There will be a brief maintenance window every Friday at 17:00 Pacific.
For further details, see CollabNet's maintenance and upgrade policy.

Back to topic list

svn+spnego+require ldap-group

Author webpost at tigris dot org
Full name webpost at tigris dot org
Date 2009-04-02 12:57:57 PDT
Message Is it possible to use "require ldap-group" with kerberos authentication? Kerberos authentication works fine with require valid-user, if i add require ldap-group i get an error trying to access my directory:

"Authorization Required

This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required."

Here's my subversion.conf



<Location /testsrc>
   DAV svn
   SVNPath /var/lib/subversion/​repositories/testrc
   AuthType Kerberos
   KrbAuthRealms myserver.organization.country
   Krb5Keytab /etc/httpd/conf.d/svn.keytab
   KrbMethodNegotiate On
   KrbMethodK5Passwd Off
   KrbSaveCredentials On
   AuthName "Authorization Realm"
                                     
AuthBasicProvider ldap
AuthzLDAPAuthoritative on
AuthLDAPURL "ldap://adserver.dom​ain.country:389/DC=d​omain,DC=country?sAM​AccountName?sub?(obj​ectClass=*)" NONE
AuthLDAPBindDN "CN=apachebind,CN=Us​ers,DC=organization,​DC=country"
AuthLDAPBindPassword hackme
Require ldap-group CN=svntest,CN=Users,​DC=organization,DC=c​ountry
</Location>

« Previous message in topic | 1 of 1 | Next message in topic »

Messages

Show all messages in topic

Subject
Author
Full name
Date posted
+
svn+spnego+require ldap-group webpost at tigris dot org webpost at tigris dot org 2009-04-02 12:57:57 PDT
Messages per page: