I'am using mod_auth_ldap (not mod_authz_svn) without problems.
At the very beginning we had to face with a pb with the username returned by authentication phase
that was the full DN and because of the "," name components it was impossible to setup SVN groups
with LDAP identities.
I dont' know if your module returns a full DN as authenticated user and if ths can cause
troubles to your mod_authz_svn configuration.
Maybe apache log would help.
Guido.
> -----Original Message-----
> From: Craig McElroy [mailto:craig.mcelroy@metissian.com]
> Sent: Saturday, November 13, 2004 12:52 AM
> To: users@subversion.tigris.org
> Subject: Problems Using mod_authz_ldap With mod_authz_svn
>
>
> Greetings,
>
> I am working on a client configuration and need to toss something out
> here in case anyone else has had to do it before. The client
> needs to
> have authentication done via LDAP. He needs a "single sign
> on" between
> his subversion repositories, webdav, applications, etc. He also
> requires fine grained permissions on his repositories that would
> require the use of mod_authz_svn.
>
> I seem to be running into problems when using the two in
> conjunction.
> If I specify a AuthzSVNAccessFile and use an htpasswd generated
> AuthUserFile, all is fine. If is use mod_authz_ldap to authenticate,
> but turn off the fine grained permissions by commenting out the
> AuthzSVNAccessFile, all is fine. When I add the access file
> back in, I
> can no longer authenticate. Here is the excerpt from my config:
>
> <Location /svn>
> DAV svn
> SVNParentPath /opt/svn/repositories
>
> AuthzLDAPEngine on
> AuthzLDAPServer 127.0.0.1
> AuthzLDAPUserBase ou=People,dc=mersoft,dc=net
> AuthzLDAPUserKey uid
> AuthzLDAPUserScope base
>
> # AuthzSVNAccessFile /opt/svn/repositories/svn-access-file
>
> AuthType basic
> AuthName "Subversion"
> require valid-user
> </Location>
>
> Has anyone had to deal with this configuration combination
> before? Is
> it possible to use them in conjunction?
>
> Thanks,
> -craig
>
> Craig McElroy
> Metissian LLC
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Mon Nov 15 09:04:02 2004