[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

mod_auth_sspi SSPIDomain question

From: Gillis, Paul <pgillis_at_insight-tek.com>
Date: Wed, 29 Oct 2008 10:32:49 -0400

I am a little confused about the SSPIDomain directives that come with
mod_auth_sspi. The documentation that comes with the module leads me to
believe that you are supposed to specify your domain name. But the
Tortoise documentation says to specify your domain controller.

 

Does anybody know for certain which it really is supposed to be?

 

 

This is the documentation that comes with mod_auth_sspi:

 

SSPIDomain - set to the domain you want users authenticated

                     against for cleartext authentication - if not

                     specified, the local machine, then all trusted

                     domains are checked

SSPIOmitDomain - set to 'on' if you want the usernames to have the
domain

                     prefix OMITTED, on = user, off = DOMAIN\\user

 

This is the documentation from section 3.1.7 in the Tortoise user guide:

also you need to add

* SSPIAuth On

* SSPIAuthoritative On

* SSPIDomain <domaincontroller>

* SSPIOmitDomain on

* SSPIUsernameCase lower

* SSPIPerRequestAuth on

* SSPIOfferBasic On

within the <Location /svn> block. If you don't have a domain controller,
leave the name of the domain control as <domaincontroller>.

Note that if you are authenticating using SSPI, then you don't need the
AuthUserFile line to define a password file any more. Apache
authenticates your username and password against your windows domain
instead. You will need to update the users list in your svnaccessfile to
reference DOMAIN\username as well.

Thanks!

- Paul

 

This e-mail message and all attachments thereto may contain technical data that is subject to export control regulations, or confidential material, and is for the sole use of the intended recipients. Review, dissemination, or other use by anyone else is prohibited. If you are not an intended recipient, please contact the sender and delete all copies.
Received on 2008-10-29 15:33:03 CET

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.