Rumor has it that mod_auth_kerb can support client certificate exchanges
with Active Directory, making single-sign-on available through Apache.
Folks have said that when they use this approach with TortoiseSVN
(haven't heard if it works with cmdline client), it "just works."
More than once I've offered to investigate this and write up a FAQ if
someone could provide me a pre-compiled mod_auth_kerb binary for
Windows.
So, if you can go through whatever it takes to compile the mod_auth_kerb
binary for Windows and make that available, I'll pick up from there and
work on figuring out the plumbing...
Steve Dwire
-----Original Message-----
From: Jerry Haltom [mailto:wasabi@larvalstage.net]
Sent: Wednesday, March 09, 2005 11:58 AM
To: users@subversion.tigris.org
Subject: SSPI support
I am in real bad need of proper single sign-on support for Subversion on
Windows at least (Linux would be pretty rad too). I am pitching
Subversion and it's associated application bundle (including CollabNet)
as an alternative to some of the other commercial offerings at my
company. Some of our security policies require single sign-on in any
application deployed. Smart cards are in use, etc.
I have successfully configured Apache to support SSPI authentication.
This is pretty awesome. This works perfectly with IE when browsing to
http://server/svn/repository. It never once asks for credentials, yet it
is secure.
Using TortoiseSVN and/or the command line SVN client however, I am
prompted for login. Sure, the user name and password integrates, but it
is not single sign-on.
I suppose my questions are pretty simple. Can this be made to work? What
is holding it back? Who do I have to sleep with to get it?
Thanks!
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Mar 9 19:32:52 2005