RE: User name as author when using LDAP

On Tue, 2006-07-11 at 09:23 +0100, Olly Stephens wrote:
> On 11 July 2006 09:12, Håvard Bjåstad wrote:
> > Now that we're preparing for production use, we want to use
> > Apache with LDAP for user authentication. With Apache+LDAP, I
> > log on as 'havard' and SVN logs the author as 'CN=Håvard
> > Bjåstad,CN=Users,DC=tracetracker,DC=com'
>
> Sounds like you have the "AuthLDAPRemoteUserIsDN" directive set in your apache config. It's not set by default, but setting it asks apache to replace the username with the DN before proceeding (i.e. before it reaches the SVN code).
>
> Turning this option off should fix it.

Actually, "AuthLDAPRemoteUserIsDN" is not set. Here is the relevant
section from our apache config file:

<Location "/svn">
        DAV svn
        SVNPath /svn_root

        AuthType Basic
        AuthName "Subversion Repository"

        AuthzLDAPEngine on
        AuthzLDAPUseLDAP on
        AuthzLDAPServer xxx.xxx.xx.xx
        AuthzLDAPBindDN "CN=LDAPuser,CN=Users,DC=tracetracker,DC=com"
        AuthzLDAPBindPassword "xxxxxxxxx"
        AuthzLDAPUserKey sAMAccountName
        AuthzLDAPUserBase "CN=Users, DC=tracetracker, DC=com"
        AuthzLDAPUserScope subtree
        AuthzLDAPAuthoritative on

        <LimitExcept GET PROPFIND OPTIONS REPORT>
                require valid-user
        </LimitExcept>
</Location>

--
Håvard Bjåstad, Head of Product Development, TraceTracker
email: havard@tracetracker.com, aim/skype/yahoo: hbjastad, web: www.tracetracker.com
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org