Hmm, I thought that worked for me earlier.
At this time though, I'm just using groups and that might be a good
workaround for you as the = characters all appear only on the RHS in
such a configuration file. For example:
[groups]
dev = /CN=user1@example.com, /CN=user2@example.com,
/CN=user3@example.com
admin = /CN=user1@example.com
# Allow Everyone to read the bottom of the tree
[/]
* = r
@admin = rw
# Allow everyone to use the /test hierarchy
#[/test]
* = rw
# Special permissions for projectA tree
[/projectA]
* =
@dev = rw
On May 25, 2004, at 1:46 PM, Fredrik Svensson XF (LD/EMP) wrote:
> Hello,
>
> I'm trying to set up subversion to use client certificates together
> with
> mod_authz_svn.
> This doesn't seem to work. The problem is that parse_authz_lines uses
> svn_config_enumerate to parse the access file. If the users has
> equalsigns in the name, a Certificate DN has, the first sign will be
> used
> as the separation between name and value.
>
> This has the effect that a line in the access file
> /C=SE/ST=NA/O=Ericsson/OU=CPO/CN=admin/
> emailAddress=fredrik.svensson.xf@ericsson.se = rw
> will be sent to the parse_authz_line from svn_config_enumerate as
> name = /C
> value =
> SE/ST=NA/O=Ericsson/OU=CPO/CN=admin/
> emailAddress=fredrik.svensson.xf@ericsson.se = rw
>
> and parse_auth_line "return TRUE" to svn_config_enumerate telling it
> that the line had nothing
> to do with the user we were trying to authenticate! :))
>
> any quick suggestions how to solve this?
>
> Kind Regards
> Fredrik Svensson
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Tue May 25 21:00:42 2004