"Vlad Georgescu" <vgeorgescu@gmail.com> writes:
> On 4/10/07, David Anderson <dave@natulte.net> wrote:
> > On 4/10/07, Eric Gillespie <epg@pretzelnet.org> wrote:
> > > Can someone who worked on adding SASL support to svnserve update
> > > the man pages to explain how to use it? The comments in the
> > > svnserve.conf in a new repository are less than helpful:
> >
> > I didn't do anything with SASL other than follow the development, but
> > my understanding is that most of the actual configuration takes place
> > in /etc/sasl, where Cyrus SASL stores one config file per server with
> > SASL support. The values in svnserve.conf just specify "Yes, ask Cyrus
> > to handle SASL", and the min/max encryption values will act as a
> > filter to Cyrus SASL as it tries to decide what authentication
> > mechanism it should use, if it has a choice between several.
> >
> > For the rest, we need a sample /etc/sasl/subversion.conf. If my
> > explanation was correct, that is.
>
> That sounds about right. To clarify, the place where SASL looks for
> its configuration files is distro-dependent, it might be /etc/sasl,
> but it's usually /usr/lib/sasl2.
What does a sample subversion.conf look like? After poking
around in the html pages that came with cyrus sasl, i created
/usr/lib/sasl2/subversion.conf (i had to find where to put it
with strace, but i understand now that's a distro problem, sigh)
with just this line:
pwcheck_method: saslauthd
saslauthd seems to be running, and i restarted svnserve (and
strace shows that it's reading my subversion.conf), but in
/var/log/auth.log i see it's still trying to read /etc/sasldb2 .
--
Eric Gillespie <*> epg@pretzelnet.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Tue Apr 10 23:12:59 2007