On Nov 15, 2004, at 2:02 AM, Guido Anzuoni wrote:
> I'am using mod_auth_ldap (not mod_authz_svn) without problems.
> At the very beginning we had to face with a pb with the username
> returned by authentication phase
> that was the full DN and because of the "," name components it was
> impossible to setup SVN groups
> with LDAP identities.
> I dont' know if your module returns a full DN as authenticated user
> and if ths can cause
> troubles to your mod_authz_svn configuration.
>
> Maybe apache log would help.
>
> Guido.
>
Guido,
Thanks for pointing me in the right direction. For whatever reason,
looking at the access log to see what the user was being passed along
as was the one thing I hadn't considered. Sure enough, it was passing
along the full DN instead of just the username. It turns out the the
version of the mod_authz_ldap that ships with Red Hat Enterprise v.3 is
0.22. This version of the module uses the full DN with no option to
change it in the Apache config. I removed it and built the latest
(0.26) which defaults to passing just the username and has directives
to pass the full DN, or other attributes. All is working great now.
Cheers,
-craig
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Nov 17 16:48:34 2004