[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Accessing REPOS with Alternate WINDOWS AD account than currently logged in (HOW)

From: Stefan Küng <tortoisesvn_at_gmail.com>
Date: Sat, 26 Jan 2013 09:18:21 +0100

On 24.01.2013 23:38, J.Neal_at_emerson.com wrote:
> 1.I have a situation that I have been trying to find guidance to online,
> and I am having issues finding my solution.
> It revolves around Windows AD and needing to access Repositories as
> different AD username than currently logged into the current windows
> session.
> I have the following requirement to fulfill.
> * AD Authentication Must Be used due to security restrictions
> * I have users that are working for company X in domain XYZ.
> * My company , company A is in domain ABC.
> * Company X is trusted, and inside our firewall in a very convuleted way
> that is hard to explain.
> * While logged onto their local PC in Domain XYZ, they need to utilize
> the TortoiseSVN Client and access REPOS using a different windows
> username that is in domain ABC we have created for them.
> When they access websites, including our SVN website, they can type in
> the correct window credentials domain abc with username.
> BUT when they use the windows client, it is always forcing the issue and
> not letting them access with an username that is anything but the
> current logged in windows account which is in DOMAIN XYZ. I am unable to
> add this windows account to our SVN usergroup for AD access.
> HOW DO I GET THEIR SYSTEM SETUP SO, when they righclick and use
> tortisesvn options, it uses the domain/username that I want it to and
> not what is currently logged into the windows session which would
> normally work.

Assuming you've set up the SVN repositories with an Apache server and
mod_auth_sspi, you have to add this line:
SSPIOfferBasic On
to the
<Location /xxx>
block in your apache config file.

With this line you're forcing the SSPI auth module to ask for
username/password instead of using the automatic authentication with the
windows account.


   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest interface to (Sub)version control
    /_/   \_\     http://tortoisesvn.net
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2013-01-26 09:18:32 CET

This is an archived mail posted to the TortoiseSVN Users mailing list.