AFAIK you cannot specify a LDAP group in AuthzSVNAccessFile.
There have been some discussions on this topic in September.
Anyway, remember that ',' is the separator of group members in AuthzSVNAccessFile so
if you plan to (re)define groups you cannot use full DN of members.
Guido.
> -----Original Message-----
> From: fisch [mailto:fisch@conne-island.de]
> Sent: Monday, October 04, 2004 11:43 AM
> To: users@subversion.tigris.org
> Subject: AuthzSVNAccessFile and LDAP-Groups
>
>
> hi,
> I want to use groups from the LDAP for a per directory authorization,
> but it doesn't work :(
>
> the svn-part of the apache2 configuration is working:
>
> <IfDefine SVN>
> <IfModule !mod_dav_svn.c>
> LoadModule dav_svn_module
> extramodules/mod_dav_svn.so
> </IfModule>
> <IfDefine SVN_AUTHZ>
> <IfModule !authz_svn_module.c>
> LoadModule authz_svn_module
> extramodules/mod_authz_svn.so
> </IfModule>
> </IfDefine>
> <Location /subversion>
> DAV svn
> SVNPath /daten/svn
> AuthType Basic
> AuthName "Subversion repository"
> AuthzSVNAccessFile /etc/subversion/accessfile
> AuthLDAPEnabled on
> AuthLDAPURL ldap://host/dc=my,dc=company,dc=org?uid
> require valid-user
> </Location>
> </IfDefine>
>
> my /etc/subversion/accessfile:
> [subversion:/project1]
> @cvs = rw
> @cn=cvs,ou=groups,dc=my,dc=company,dc=org = rw
> cn=user1,ou=People,dc=my,dc=company,dc=org = r
> user2 = r
> user3 = rw
>
>
> - no member of group cvs can access
> - user1 can't access
> - user2 and user3 can access
> - all users and groups are stored at LDAP no local users or groups
>
> I have one group in LDAP for each project and I want to use
> these groups
> for authorization.
>
> Any hints?
>
> subversion 1.1, gentoo-linux
>
> bye
> fisch
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Mon Oct 4 11:52:03 2004