[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: authentication via LDAP

From: Josh Kuo <josh.kuo_at_prioritynetworks.net>
Date: 2006-02-11 20:45:25 CET

Here's my apache2 config, I defined a virtual host for my SVN server
that only accepts HTTPS connection, and authenticates via LDAP. I am no
apache guru, these are bits and pieces that I've copied and tested, it
works for me. I hope it helps.

<virtualhost 10.0.0.9:443>
        ServerName svn.sitename.com
        LoadModule ssl_module /usr/lib/apache2/modules/mod_ssl.so
        SSLEngine On
        SSLCertificateFile /etc/apache2/ssl/apache.pem
        DocumentRoot /var/www/
        <Location /code>
                Order deny,allow
                Allow from all
                DAV svn
                SVNParentPath /absolute/path/to/repository
                SetHandler ldap-status
                AuthLDAPEnabled on
                AuthLDAPURL ldap://ldap.sitename.com/dc=sitename,dc=com
                AuthLDAPAuthoritative on
                AuthType Basic
                AuthName "Subversion General Access Repository"
                Satisfy All
                Require valid-user
        </Location>
        ErrorLog /var/log/apache2/error.log
        LogLevel warn
        CustomLog /var/log/apache2/access.log combined
</virtualhost>

On Sat, 2006-02-11 at 17:03 +0000, Phil Endecott wrote:
> Brad O'Hearne wrote:
> > Is it possible to authenticate subversion users via LDAP?
>
> If you use the SVN Apache module as your server, all of the
> authentication methods that Apache provides are available. I'm fairly
> sure that this includes LDAP. The generic Apache documentation will
> have more information.
>
> Perhaps someone will post an Apache configuration for SVN+LDAP. If not,
> I suggest that you get Apache+LDAP working first, i.e. so that you can
> control access to a web page using an LDAP username and password; once
> that works, combine it with SVN.
>
> --Phil.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>

-- 
Josh Kuo <josh.kuo@prioritynetworks.net>

Received on Sat Feb 11 20:46:53 2006

This is an archived mail posted to the Subversion Users mailing list.