[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Help with Apache+LDAP configuration

From: Clark Ritchie <clarkritchie_at_yahoo.com>
Date: 2006-07-18 01:49:58 CEST

Ok, switched to authnz and I am much, much closer to a solution now. At least I think it's trying to reach the LDAP server.

Thanks to those who pointed me in the right direction.

<Location /svn>
  AuthType Basic
  AuthBasicProvider ldap
  AuthzLDAPAuthoritative Off
  AuthName "Subversion Repository"
  AuthLDAPBindDN cn=LDAP,ou=Staff,dc=mydomain,dc=com
  AuthLDAPBindPassword xxxxxx
  AuthLDAPURL ldaps://aa.bb.cc.dd:636/ou=Staff,dc=mydomain,dc=com?uid
  require valid-user
</Location>

Clark Ritchie <clarkritchie@yahoo.com> wrote: Ok... I think I've RTFM enough to make my head spin...

Trying to get Subversion, Apache, and LDAP to play nicely. Best I can tell Apache is not even attempting to contact my LDAP server to authenticate.

My ISP has opened port 636 on our AD server and a user to bind with:

DN: cn=LDAP, ou=STAFF, dc=OUR-DOMAIN, dc=COM

Apache 2.2 compiled from the ports tree on FreeBSD 6.1.

Any tips?

<Location /svn>
  DAV svn
  SVNPath /svn/repository
  AuthType Basic
  AuthName "Subversion Repository"
  AuthLDAPURL ldap://aa.bb.cc.dd:636/OU=Staff,dc=our-domain,dc=com?uid?sub?(objectClass=*)
  AuthLDAPBindDN "cn=LDAP,ou=Staff,dc=domain,dc=our-domain,dc=com"
  AuthLDAPBindPassword secret
  require valid-user
</Location>

When I hit http://mysite/svn and login as 'myuserid', this is all I see in the logfile:

[Mon Jul 17 14:53:29 2006] [error] [client 192.168.10.65] access to /svn/ failed, reason: verification of user id 'myuserid' not configured

Thanks in advance.

CLARK RITCHIE

Mt Tabor Series bicycle race
http://www.mttaborseries.com/
    

---------------------------------
Yahoo! Music Unlimited - Access over 1 million songs. Try it free.

CLARK RITCHIE

Mt Tabor Series bicycle race
http://www.mttaborseries.com/

                         
---------------------------------
See the all-new, redesigned Yahoo.com. Check it out.
Received on Tue Jul 18 01:51:22 2006

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.