Re: NT Domain authentication with Subversion

On Tuesday 07 March 2006 21:06, Anderson, Allan wrote:
/> Searching the archives, I've become confused about how best to /
/> allow Windows domain users to have Subversion access. /
/> /
/> I see on http://svnbook.red-bean.com/en/1.1/ch06.html that it says /
/> any form of Apache authentication will work: mod_dav_svn and I /
/> presume mod_ntlm and/or mod_sspi. I also see that a bug now marked /
/> fixed says these methods work as of 1.3RC3. /
/> http://subversion.tigris.org/issues/show_bug.cgi?id=1844 /
/> /
/> Finally, there's this information on TortoiseSVN: /
/> http://tortoisesvn.sourceforge.net/docs/release/TortoiseSVN_en/ch03 /
/>.html#tsv n-serversetup-apache-5 /
/> /
/> This makes me think I'll be able to do this with SVN 1.3.x, after /
/> making sure I have Apache set up correctly. /
/> /
/> I'm curious: has anyone else done this recently? I see that it /
/> appears to work with the command line client and TortoiseSVN; /
/> should it also work with SmartSVN or other svn clients? /
/> /
/> I'm migrating from CVS on Solaris (with NIS authentication) to SVN /
/> or CVSNT on Solaris. Most developers here use Windows, but there /
/> are some Solaris and a few Linux users. My manager really, really /
/> wants to be able to use NT domain AD logins to allow access to /
/> source control for the Windows users. I'd like to make this work /
/> with SVN. I'd love some input from this list. /
/> /
/> Thanks, folks.

/Hi all,

I've spend days monkeying around trying to make NT domain authentication
work with different solutions but I finally succeeded.

Here is how our config looks like :
- NT Domain based PDC/BDC style (not Active Directory, but you could try)
- Debian and RHEL Linux hosting Apache *2* with dav_svn_module +
authz_svn_module working ok
- Dozens of Windows PC with TortoiseSVN + runned by scripts cmdline SVN
client

I didnt succeed in using mod_auth_sspi as it seems to work only for
Windows hosted Apache server.

Then, I felt into the AuthenNTLM solution : see
http://search.cpan.org/~speeves/Apache-AuthenNTLM-2.10/

Note that there is also an Apache2-AuthenNTLM but strangely, it did not
work at all with the Apache2.xx servers and that's what made me spent
most of my time and patience. Finally I used AuthenNTLM-2.10 and it
near-immediately worked ok.

Now everything work quite perfectly* with Tortoise and the cmdline clients.

*except when I ask for authentication also for reading (by removing
LimitExcept tags) but it will be explained in a separate thread.

Hope this helps.

-- 
Frédéric DUARTE
<http://gconf/wiki>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org