I have been using a mod_auth_sspi module from this site:
http://www.deadbeef.com/software/sspi.html
It seems to do the SSPI part correctly, at least with IE. I really WOULD
like a better module to be included upstream as part of Apache, of
course. =)
On Wed, 2005-03-09 at 13:28 -0500, Steve Dwire wrote:
> Rumor has it that mod_auth_kerb can support client certificate exchanges
> with Active Directory, making single-sign-on available through Apache.
> Folks have said that when they use this approach with TortoiseSVN
> (haven't heard if it works with cmdline client), it "just works."
>
> More than once I've offered to investigate this and write up a FAQ if
> someone could provide me a pre-compiled mod_auth_kerb binary for
> Windows.
>
> So, if you can go through whatever it takes to compile the mod_auth_kerb
> binary for Windows and make that available, I'll pick up from there and
> work on figuring out the plumbing...
>
> Steve Dwire
>
> -----Original Message-----
> From: Jerry Haltom [mailto:wasabi@larvalstage.net]
> Sent: Wednesday, March 09, 2005 11:58 AM
> To: users@subversion.tigris.org
> Subject: SSPI support
>
> I am in real bad need of proper single sign-on support for Subversion on
> Windows at least (Linux would be pretty rad too). I am pitching
> Subversion and it's associated application bundle (including CollabNet)
> as an alternative to some of the other commercial offerings at my
> company. Some of our security policies require single sign-on in any
> application deployed. Smart cards are in use, etc.
>
> I have successfully configured Apache to support SSPI authentication.
> This is pretty awesome. This works perfectly with IE when browsing to
> http://server/svn/repository. It never once asks for credentials, yet it
> is secure.
>
> Using TortoiseSVN and/or the command line SVN client however, I am
> prompted for login. Sure, the user name and password integrates, but it
> is not single sign-on.
>
> I suppose my questions are pretty simple. Can this be made to work? What
> is holding it back? Who do I have to sleep with to get it?
>
> Thanks!
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Mar 9 19:42:10 2005