> On Fri, Aug 24, 2001 at 10:58:04PM +0200, Sander Striker wrote:
> >...
> > Yes, that was something on my mind too :)
> > I'll speak to Ben Laurie again and see if he can explain the details
> > of the certificate generation process to me. I'll then get started
> > on such a conversion util (which we could dump in /contrib ?)
> provided it
> > is at all possible. In any case I'll report back here.
>
> I would hope that you would contribute it to the Subversion project, and
> we'd check it into the tools directory.
>
> > Greg gave a good insight on the authentication part of my
> question(s), thx.
> > As for the authorization part, that's going to work through hooks which
> > is a 'Good Thing' because it is easily custimizable. Once the protocol
> > is set for the r/w sentinels (or once you get discussing these)
> > I'll jump in again ;)
>
> Apache does both authentication and authorization. I'm still waiting for
> people to explain what kinds of authz they want that Apache can't
> handle.
The case where apache isn't involved. We need a way to let the repos
handle if a user X is allowed Y on path Z. The berkeley argument won't
hold, since if we get around to implementing the sql backend, writing
to the repos isn't so easy as it is now with berkeley db. This can
be done through hooks. The read/write sentinels seems a pretty efficient
solution. Then again, discussion is always ok :)
> Or for a specific design that they'd like to see, which we could then use
> within the standard Apache authz system.
:)
> [ as you may have guessed, I'm not a fan of external authz systems. and I
> think that I may even disagree with the sentinel concept (need more
> research and thinking on that) (it seems they just kind of
> appeared while I was away; either that, or whothehellknows where I
> was :-)) ]
That tends to happen :)
> Cheers,
> -g
>
> --
> Greg Stein, http://www.lyra.org/
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Sat Oct 21 14:36:37 2006