Re: Kerberos Authentification + Authorization with groups

John Szakmeister wrote:
> On Wednesday 29 June 2005 12:26, Didier Trosset wrote:
>
>>Hi,
>>
>> ----- 8< -----
>>
> I've found that with kerberos authentication the @ACQIRIS.CH is
considered
> part of the username. Also, in the second version of your authz file,
> your missing the :/ (I can't remember if that really matters or not off
> hand, but I always put it there).
>

You're right. (The :/ were here.) It works now using:
   [svn-www:/]
   dtrosset@ACQIRIS.CH

But As soon as I try to create groups:
   [groups]
   www-editors = dtrosset@ACQIRIS.CH other@ACQIRIS.CH

   [svn-www:/]
   @www-editors

I got this 401 error again !

Do you know anything about this ?

And additionnal question, I guessed from all I have seen around the Web
that Kerberos is *the* solution for authenticating against a M$ Windows
Server 2003 (with Active Directory). Hope I'm guessing correctly?

Didier

> -John
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>

-- 
Didier Trosset-Moreau
Acqiris <www.acqiris.com>
Geneva, Switzerland
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org