RE: Re: Getting NT Authorization Right with mod_auth_sspi.so

Hey all.

I ended up getting subversion to authenticate to a windows domain/active
directory using a different method. Here's the short version:

- Set up Samba to authenticate to your domain
- Ensure that you can do a getent group on the linux box,
  and it displays the windows users
- Install apache's mod_pam (I think that's what it's called,
  this is off-the-cuff), so that Apache will work w/ the PAM
  subsystem
- Set up the repositories to work w/ mod_pam
- If you want group access, you can use a custom shell script
  to translate the output from getent group to apache-style
  groups files. Set that up w/ a cron job every 15 minutes.
- Enjoy

This set up requires only Basic Auth, so the SSL problems are solved w/
IE. The system I used already had Samba installed, so I got that for
"free". I just needed the mod-auth glue, and that worked great.

I was pondering writing this down in more detail, and submitting it as a
patch to the documentation. Should I bother?

<mega snip>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Tue Jul 13 19:53:25 2004