RE: authenticate Subversion 3.51 with a Windows Domain?

(Re-sending to list. I'm one of those "reply-to considered beneficial"
people)

I'm not an SSPI expert; I just found what worked for me, referencing the
TortoiseSVN document written by someone else. I'll take a stab at this
to fill the gap until someone with more Windows Domain expertise comes
along...

As I understand it, the mod_auth_sspi MUST have a domain controller. I'm
assuming that author of TortoiseSVN's document meant exactly what he
said when he wrote "If you don't specify a domain controller then it
assumes that the local server is also the domain controller." If you're
not using a domain controller, then your environment doesn't meet the
assumption.

Now I'm going way outside my comfort zone, but I'll try anyway. I'm
suspecting that SSPI is a protocol for communicating with a Windows
Domain Controller only, and that SSPI cannot be used with a "Workgroup"
setup. I'll be more than happy to be told I'm wrong on this account,
though.

S_E_D

  _____

From: Sean Moss-Pultz [mailto:sean@moss-pultz.com]
Sent: Tuesday, January 06, 2004 11:16 PM
To: Steve Dwire
Cc: users@subversion.tigris.org
Subject: Re: authenticate Subversion 3.51 with a Windows Domain?

        Actually, this is one of the FAQ at

        http://subversion.tigris.org/project_faq.html. See "How do I
allow

        clients to authenticate against a Windows domain controller
using SSPI

        Authentication?"

Thanks for subtle nudge to re-RTFM. I was confused on one line. Since
you wrote this part maybe you could help clarify it for others, too
(although it could just be me).

I was confused with the line and comment:

SSPIDomain <domaincontroller>

If you don't specify a domain controller then it assumes that the local
server is also the domain controller.

To me this means that if I don't want to use a domain control (ie it's a
local server) that I can just use:

SSPIDomain

in my config file (leave off the rest). Which doesn't work. To me <... >
means either a tag (xml so I also need a </...>) or "insert stuff here"

Maybe this is just highlights my lack of Apache knowledge....

What do you think?

Thanks again for the help.

-Sean
Received on Thu Jan 8 20:28:14 2004