HowTo: Installing the latest Subversion on SuSE Linux Enterprise Server 9.1 and configure it to use OpenLDAP

I became some headache installing the latest Subversion on SuSE Linux
Enterprise Server 9.1
and configure it to use OpenLDAP as Authentication Server, so I wrote this
small HowTo,
hope somebody can find it useful.

Best regards
Arash

##########################################################################

In this HowTo I'm going to show how Subversion can be installed on
SuSE Linux Enterprise Server 9.1 using SuSE Apache2 package and be
configured to use OpenLDAP as Authentication Service:

Download Apache 2 latest Source disrtibution from:
http://httpd.apache.org/download.cgi
Unix Source :httpd-2.0.52.tar.gz

and unpack the package to e.g. /tools

1. Apache Custom Installation from httpd-2.0.52 Source

sles9-subversion:/tools/httpd-2.0.52 #

  make clean # only used if something was gone wrong with previous
installations

./configure --prefix=/usr/local/apache2 --with-mysql --with-susexec
--enable-mods-shared=all
 make
 make install

after this apache will be installed under /usr/local/apache2

2. Subversion Installation:

Download the latest Subversion Installation Package from:

http://subversion.tigris.org/

(the latest version at this time of writing this document is Subversion
1.1.1)

./configure --enable-maintainer-mode
--with-apxs=/usr/local/apache2/bin/apxs --with-ssl
  make
  make install

By update:
rm /usr/local/lib/libsvn*
./configure --enable-maintainer-mode
--with-apxs=/usr/local/apache2/bin/apxs --with-ssl
make clean && make && make install

Copy mod_dav_svn.so and mod_authz_svn.so _from_ the Custom Installation
_to_ SuSE prefork directory /usr/lib/apache2-prefork/

cp /usr/local/apache2/modules/mod_dav_svn.so /usr/lib/apache2-prefork/
cp /usr/local/apache2/modules/mod_authz_svn.so /usr/lib/apache2-prefork/

3. Create /svn repository using the fsfs file system type

svnadmin create --fs-type fsfs /svn

4. Apache LDAP Configurtion

On SuSE Linux Enterprise Server the Apache is installed under:
/etc/apache2 adn I suppose you have OpenLDAP as your LDAP Server.

create a file named svn_mod.conf.ldap under /etc/apache2

vi /etc/apache2/svn_mod.conf.ldap

copy / paste and customize the following snippet to svn_mod.conf.ldap

User wwwrun
Group www
LoadModule dav_svn_module /usr/lib/apache2-prefork/mod_dav_svn.so
LoadModule authz_svn_module /usr/lib/apache2-prefork/mod_authz_svn.so

<Location /svn>
    DAV svn
    SVNParentPath /svn
    #SVNPath /svn/reposproj
    AuthType Basic
    AuthName "LDAP Authentication for /svn repository"
    AuthLDAPEnabled on
    AuthLDAPAuthoritative on
    AuthLDAPURL
ldap://sles9-ldap.server/ou=people,ou=de,dc=developer?uid?sub?(objectClass=*)
 # change according to your needs
    #AuthLDAPURL
ldaps://sles9-ldap.server/ou=people,ou=de,dc=developer?uid?sub?(objectClass=*)
 # you have to ask your admin for public certificates for your Server
    #AuthUserFile /etc/apache2/svn-auth-file
    AuthzSVNAccessFile /etc/apache2/AuthzSVNAccessFile
     <LimitExcept GET PROPFIND OPTIONS REPORT>
       Satisfy all
       SSLRequireSSL
      # Require group X Y
     </LimitExcept>

    Require valid-user
</Location>

5. write the following attribute:

APACHE_CONF_INCLUDE_FILES="/etc/apache2/svn_mod.conf.ldap"

into /etc/sysconfig/apache2

6. restart Apache:

sles9-subversion:/tools/httpd-2.0.52 # rcapache2 restart

7. test your Installation:

svn ls https://sles9-subversion/svn/<imported_modules>

now your clients shall be prompted for:

"LDAP Authentication for /svn repository"

Written by Arash on Novemver/25/2004

##########################################################################

This HowTo will be maintained on:

http://www.pomegranate.de:90/cms/forum/viewthread?thread=3

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Thu Nov 25 13:36:52 2004