[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: HowTo for LDAP authentication combined with per-file authorization on files / directories within a svn repository ?

From: Edward Bosco <ebosco_at_prologic-inc.com>
Date: 2006-04-07 22:32:48 CEST

-----Original Message-----
Jared Wrote:

Edward Bosco wrote:
> I want to control what files are downloaded to a subversion repository
> client by the user name and which group a file is associated with. All
> the various files are in a common repository. The files should be
> associated with groups of LDAP-listed users.

==

Jared -

I'm able to control access by individuals to particular directories;
here's an example - user ebosco can't get in, whereas user test1 can. I
used the command line utilities to get closer to svn than TortioseSVN
might.

C:\Documents and Settings\ebosco>svn ls
https://reatss.prologic-inc.com/svn2/testrepo/SysE/Aerospace/REATSS/trun
k/sim --username ebo
sco --password xxxxx
svn: PROPFIND request failed on
'/svn2/testrepo/SysE/Aerospace/REATSS/trunk/sim'
svn: PROPFIND of '/svn2/testrepo/SysE/Aerospace/REATSS/trunk/sim': 405
Method Not Allowed (https://reatss.prologic-inc.com)

C:\Documents and Settings\ebosco>svn ls
https://reatss.prologic-inc.com/svn/testrepo/SysE/Aerospace/REATSS/trunk
/sim --username test1 --password test1
PilotProjects/
Presentations/
Reference/
Sim Contents.doc
SpaceEnvironmentModels/
Vendors/

= Here's the /etc/apache2/mods-enabled/dav_svn.conf file ==

<Location /svn>
  DAV svn
  SVNParentPath /var/repos/repositories
  AuthType Basic
  AuthName "Test Repo"
  AuthLDAPBindDN test@protest.com
  AuthLDAPBindPassword test
  AuthLDAPURL ldap...<more stuff>
  AuthLDAPAuthoritative off
  AuthAuthoritative off
  AuthUserFile /etc/apache2/users
  AuthzSVNAccessFile /etc/apache2/dav_svn.authz
  Require valid-user
</Location>

== Here's the /etc/apache2/dav_svn.authz file ==

[testrepo:/]
Ebosco=
*=rw

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Apr 7 22:36:23 2006

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.