[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: User name as author when using LDAP

From: Håvard Bjåstad <havard_at_tracetracker.com>
Date: 2006-07-11 10:34:57 CEST

On Tue, 2006-07-11 at 09:23 +0100, Olly Stephens wrote:
> On 11 July 2006 09:12, Håvard Bjåstad wrote:
> > Now that we're preparing for production use, we want to use
> > Apache with LDAP for user authentication. With Apache+LDAP, I
> > log on as 'havard' and SVN logs the author as 'CN=Håvard
> > Bjåstad,CN=Users,DC=tracetracker,DC=com'
> Sounds like you have the "AuthLDAPRemoteUserIsDN" directive set in your apache config. It's not set by default, but setting it asks apache to replace the username with the DN before proceeding (i.e. before it reaches the SVN code).
> Turning this option off should fix it.

Actually, "AuthLDAPRemoteUserIsDN" is not set. Here is the relevant
section from our apache config file:

<Location "/svn">
        DAV svn
        SVNPath /svn_root

        AuthType Basic
        AuthName "Subversion Repository"

        AuthzLDAPEngine on
        AuthzLDAPUseLDAP on
        AuthzLDAPServer xxx.xxx.xx.xx
        AuthzLDAPBindDN "CN=LDAPuser,CN=Users,DC=tracetracker,DC=com"
        AuthzLDAPBindPassword "xxxxxxxxx"
        AuthzLDAPUserKey sAMAccountName
        AuthzLDAPUserBase "CN=Users, DC=tracetracker, DC=com"
        AuthzLDAPUserScope subtree
        AuthzLDAPAuthoritative on

                require valid-user

Håvard Bjåstad, Head of Product Development, TraceTracker
email: havard@tracetracker.com, aim/skype/yahoo: hbjastad, web: www.tracetracker.com
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Tue Jul 11 10:36:56 2006

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.