Login | Register
My pages Projects Community openCollabNet

Discussions > users [DISABLED] > Re: ldap authentication in subversion

subversion
Discussion topic

Back to topic list

Re: ldap authentication in subversion

Author Andrey Repin <anrdaemon at freemail dot ru>
Full name Andrey Repin <anrdaemon at freemail dot ru>
Date 2009-04-24 08:55:05 PDT
Message Greetings, Irfan Sayed!

> We are using subversion I just waneted to check can we use windows domain
> controller for authentication. what i need is they should login
> to subversion using their windows username and password.

Try mod_auth_sspi
http://www.nosq.com/​blog/2008/06/fixing-​mod_auth_sspi-and-ie​-losing-post-data/
Not that svn works transparently with SSPI, like CVSNT does, but it works.
I have it set to authenticate against local user database, but setting it to
auth against domain, even couple of domains, isn't hard.

Here's my config, you could use it as starting point:

<VirtualHost *>
    ServerName svn.mydomain.local

    DocumentRoot "C:/home/svn"
    AddDefaultCharset utf-8

    ErrorLog "C:/home/svn/.log/error_log"
    CustomLog "C:/home/svn/.log/access_log" common env=!SVN-ACTION
    CustomLog "C:/home/svn/.log/sv​n_access_log" svn env=SVN-ACTION

    <IfModule rewrite_module>
        RewriteLog "C:/home/svn/.log/rewrite_log"
        RewriteLogLevel 0

        RewriteEngine On

        # Necessary precaution
        RewriteRule "^/\..*" - [forbidden,last]

        # Important fix for http://host/repos redirect bug
        RewriteCond "%{REQUEST_METHOD}" !"^(GET|POST|HEAD)$"
        RewriteCond "%{REQUEST_FILENAME}" "^/([^/\.]+)$"
        RewriteCond "C:/home/svn/%1" -d
        RewriteRule "^/([^/\.]+)$" "/$1/" [passthrough]
    </IfModule>

    <Location "/">
        Order allow,deny
        Allow from 192.168.1.10

        <IfModule dav_svn_module>
            DAV svn
            SVNParentPath "C:/home/svn"
        </IfModule>

        <IfModule sspi_auth_module>
            Allow from all

            AuthName "Subversion repository"
            AuthType SSPI
            SSPIAuth On
            SSPIAuthoritative On
            SSPIOfferBasic On
            SSPIOmitDomain On
            SSPIUsernameCase lower
            SSPIBasicPreferred On

            # only developers may access the repository
            Require group "HOSTNAME\CVS"

            # And they should obey to SVN user permissions file
            <IfModule authz_svn_module>
                AuthzSVNAccessFile "C:/home/svn/.registry"
            </IfModule>
        </IfModule>
    </Location>
</VirtualHost>


--
WBR,
 Andrey Repin (anrdaemon at freemail dot ru) 24.04.2009, <19:42>

Sorry for my terrible english...

« Previous message in topic | 25 of 26 | Next message in topic »

Messages

Show all messages in topic

ldap authentication in subversion Irfan Sayed <irfu dot sayed at gmail dot com> Irfan Sayed <irfu dot sayed at gmail dot com> 2009-04-24 02:08:32 PDT
     Re: ldap authentication in subversion Irfan Sayed <irfu dot sayed at gmail dot com> Irfan Sayed <irfu dot sayed at gmail dot com> 2009-04-24 02:30:27 PDT
         RE: Re: ldap authentication in subversion webpost at tigris dot org webpost at tigris dot org 2009-04-24 04:25:49 PDT
             Re: Re: ldap authentication in subversion Irfan Sayed <irfu dot sayed at gmail dot com> Irfan Sayed <irfu dot sayed at gmail dot com> 2009-04-24 05:10:37 PDT
                 Re: Re: ldap authentication in subversion beppler Carlos Beppler 2009-04-24 05:31:10 PDT
                     Re: Re: ldap authentication in subversion Irfan Sayed <irfu dot sayed at gmail dot com> Irfan Sayed <irfu dot sayed at gmail dot com> 2009-04-24 05:41:23 PDT
                         Re: Re: ldap authentication in subversion beppler Carlos Beppler 2009-04-24 05:55:01 PDT
                             RE: Re: ldap authentication in subversion Johan Corveleyn <johan dot corveleyn at uz dot kuleuven dot ac dot be> Johan Corveleyn <johan dot corveleyn at uz dot kuleuven dot ac dot be> 2009-04-24 06:09:03 PDT
                                 Re: Re: ldap authentication in subversion Irfan Sayed <irfu dot sayed at gmail dot com> Irfan Sayed <irfu dot sayed at gmail dot com> 2009-04-24 08:17:02 PDT
                                     RE: Re: ldap authentication in subversion Johan Corveleyn <johan dot corveleyn at uz dot kuleuven dot ac dot be> Johan Corveleyn <johan dot corveleyn at uz dot kuleuven dot ac dot be> 2009-04-24 08:26:32 PDT
                                         Re: Re: ldap authentication in subversion Irfan Sayed <irfu dot sayed at gmail dot com> Irfan Sayed <irfu dot sayed at gmail dot com> 2009-04-24 08:51:50 PDT
                                             Re: Re: ldap authentication in subversion Irfan Sayed <irfu dot sayed at gmail dot com> Irfan Sayed <irfu dot sayed at gmail dot com> 2009-04-24 09:12:26 PDT
                                                 Re: Re: ldap authentication in subversion tylermr Tyler Roscoe 2009-04-24 09:35:44 PDT
                                                     Re: Re: ldap authentication in subversion Irfan Sayed <irfu dot sayed at gmail dot com> Irfan Sayed <irfu dot sayed at gmail dot com> 2009-04-24 10:01:27 PDT
                                                         Re: Re: ldap authentication in subversion beppler Carlos Beppler 2009-04-24 11:01:43 PDT
                                                             Re: Re: ldap authentication in subversion Irfan Sayed <irfu dot sayed at gmail dot com> Irfan Sayed <irfu dot sayed at gmail dot com> 2009-04-27 00:12:35 PDT
                                                                 RE: Re: ldap authentication in subversion Johan Corveleyn <johan dot corveleyn at uz dot kuleuven dot ac dot be> Johan Corveleyn <johan dot corveleyn at uz dot kuleuven dot ac dot be> 2009-04-27 01:30:07 PDT
                                                                     Re: Re: ldap authentication in subversion Irfan Sayed <irfu dot sayed at gmail dot com> Irfan Sayed <irfu dot sayed at gmail dot com> 2009-04-27 02:27:05 PDT
                                                                         RE: Re: ldap authentication in subversion Johan Corveleyn <johan dot corveleyn at uz dot kuleuven dot ac dot be> Johan Corveleyn <johan dot corveleyn at uz dot kuleuven dot ac dot be> 2009-04-27 02:52:50 PDT
                                                                             Re: Re: ldap authentication in subversion Irfan Sayed <irfu dot sayed at gmail dot com> Irfan Sayed <irfu dot sayed at gmail dot com> 2009-04-27 04:27:47 PDT
                                                                         Re: Re: ldap authentication in subversion beppler Carlos Beppler 2009-04-27 05:36:54 PDT
                                                                             Re: Re: ldap authentication in subversion Irfan Sayed <irfu dot sayed at gmail dot com> Irfan Sayed <irfu dot sayed at gmail dot com> 2009-04-29 05:38:30 PDT
                                             Re: Re: ldap authentication in subversion beppler Carlos Beppler 2009-04-24 09:17:42 PDT
                                             Re: Re: ldap authentication in subversion beppler Carlos Beppler 2009-04-24 09:20:57 PDT
     Re: ldap authentication in subversion Andrey Repin <anrdaemon at freemail dot ru> Andrey Repin <anrdaemon at freemail dot ru> 2009-04-24 08:55:05 PDT
Page: of 2 « Previous | Next »
Messages per page: