[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

tortoisesvn etoken support

From: Daniel van den Oord <daniel304_at_chello.nl>
Date: Wed, 9 Jun 2010 23:53:17 -0700 (PDT)

Hi we have setup an subversion repo with ldap authentication for internal use. We want to be able to extend this to users at home.
We are allready using aladdin etokens and websites that are client cert authtenicated. And we want to add subversion to that list.. however it doens't seem to work below are the apache en the servers config.
----- apache vhost conf --------

<VirtualHost svn-mobile.org1.com:443>
  ServerName svn-mobile.org1.com
  ServerAdmin webmaster_at_org1.com

  SSLEngine on
  SSLCertificateFile /etc/apache2/ssl/WILDCARD.org1.com.crt
  SSLCertificateKeyFile /etc/apache2/ssl/WILDCARD.org1.com.key

  #IE bug
  SSLInsecureRenegotiation on
  SSLCACertificateFile /etc/apache2/ssl/org1_CA.pem

  # comment next 3 lines and itr works without authentication
  SSLVerifyClient require
  SSLVerifyDepth 2
  SSLOptions +StrictRequire +StdEnvVars -ExportCertData +OptRenegotiate

  DocumentRoot /export/www/org1_svn

  <Location />
    DAV svn
    SVNParentPath /export/www/org1_svn/repository
    SVNListParentPath on
    SVNAllowBulkUpdates Off

    AuthType Basic
    AuthName "Subversion Repository"

    AuthBasicProvider org1 org2 htpasswd
    AuthzLDAPAuthoritative off

    Require valid-user
  </Location>

  ErrorLog /export/logs/apache/org1_svn-mobile/sslerror.log
  CustomLog /export/logs/apache/org1_svn-mobile/sslaccess.log combined
  CustomLog /export/logs/apache/org1_svn-mobile/sslsvn_logfile "%t %u %{SVN-ACTION}e" env=SVN-ACTION

</VirtualHost>

---------- subversion servers config -----------
[groups]
org1 = svn-mobile.org1.com

[org1]
ssl-ignore-host-mismatch = true
ssl-client-cert-file = c:\usercert.pfx
ssl-client-cert-password = usercert_password
ssl-authority-files = c:\org1_ca.pem

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2619095

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2010-06-10 13:10:20 CEST

This is an archived mail posted to the TortoiseSVN Users mailing list.