[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Setting up Jenkins and Subversion for multiple LDAP domains.

From: David Weintraub <qazwart_at_gmail.com>
Date: Tue, 6 Sep 2011 11:12:41 -0400

This is really part of the same question, but it involves both our
Subversion repository and Jenkins.

We want to use our Windows Active Directory to log into Jenkins and as
our permissioning scheme in Subversion. Subversion uses Apache httpd.

First in Subversion: We have the following setup for the "mfxdomain":

<Location /src>
        DAV svn
        SVNParentPath /opt/cm/svn_repos
        AuthType basic
        AuthName "MFX Repository"
        AuthBasicProvider ldap
        AuthzLDAPAuthoritative off
        AuthLDAPURL
"ldap://mfxdomain.mycompany.com:3268/dc=mycompany,dc=com?sAMAccountName"
NONE
        AuthLDAPBindDN "CN=svnuser,OU=Users,DC=mycompany,DC=com"
        AuthLDAPBindPassword "swordfish"
        Require valid-user
</Location>

This works great. Anyone in the mfxdomain is able to log in. However,
many of our users are actually in the effdomain, so we need to verify
a user is either in one of the two domains. How do I set this up? Do I
need a new <location>, or do I double the AuthLDAP lines?

In Jenkins, we use the active directory plugin to verify our logins.
Is it possible to specify two Active Directory domains?

And in both, how do I know if someone is in one domain or the other?
Do they need to prefix their login with the domain?

-- 
David Weintraub
qazwart_at_gmail.com
Received on 2011-09-06 17:13:12 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.