[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: SSPI Authentication + folder Authorization?

From: Johnson, Russell D. <RUSSELL.D.JOHNSON_at_saic.com>
Date: 2004-04-13 02:06:16 CEST

Thanks for the response. Using your I was successful in enabling the
functionality. The key was CAPITALIZING the domain name.

If it helps anyone:
httpd.conf
<Location /repos>
        DAV svn
        SVNParentPath c:/svn/
        SVNIndexXSLT "http://myserver/svnindex.xsl"
        AuthType SSPI
        SSPIAuth On
        SSPIAuthoritative On
        SSPIDomain <domaincontroller>
        SSPIOfferBasic On
        AuthzSVNAccessFile c:/svn/source/svnaccessfile
        AuthName "Subversion repository"
        Require valid-user
</Location>

svnaccessfile:
[groups]
developers = MY-DOMAIN\developer1, MY-DOMAIN\developer2
testers = MY-DOMAIN\tester1, MY-DOMAIN\tester2
SCAdmin = MY-DOMAIN\me

[/]
* =
@SCAdmin=rw
@developers=r
@testers=r

[/Trunk]
@developers=rw

-----Original Message-----
From: Stefan [mailto:steveking___@tigris.org]
Sent: Friday, April 09, 2004 1:39 PM
To: 'users@subversion.tigris.org'
Subject: Re: SSPI Authentication + folder Authorization?

Ben Collins-Sussman wrote:

>>You will need mod_auth_svn, and then configure the usernames in the
>>authz file as DOMAINNAME\username, not just username.
>
>
> Thanks Stefan... I had no idea about this! So the SSPI module *does*
> use basic auth headers then? Very cool!

It _can_ use basic auth headers. But you have to configure it that way.
You need to set the SSPIOfferBasic line in the config file to "On". To be
honest, I haven't been able to make it work without that line anyway, even
if I don't use mod_auth_svn.

Stefan

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Tue Apr 13 02:07:04 2004

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.