[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: svn:author with single kerberos account

From: John Rouillard <rouilj_at_renesys.com>
Date: 2006-07-20 04:35:08 CEST

On Jul 20, 2006, at 00:43, Dennis Shpakov wrote:
 
>I am setting up a subversion repository on a server that only
>allows kerberized ssh access. [...]
>
>I replaced the login shell of the svnuser account by a script that
>eventually hands execution over to svnserve -t. To implement per-
>project access control under the condition that the hook scripts
>run in the sterile environment, I made the login shell script
>extract the kerberos principal name from the credentials cache file
>[...]
>Everything looks fine except that the svn:author property is always
>set to svnuser (which is expected, of course), while one would
>naturally want to have it set to the kerberos principal name of the
>author committing the change. Is there a simple way to do it in one
>of the hook scripts using the same identification scheme as in
>start-commit?

Can you have your script that invokes svnserve -t use the principle
name as in:

    svnserver -t --tunnel-user <principle>

that should set the svn:author for you and the hook scripts can see
that using svnlook.

--
				-- rouilj
John Rouillard
System Administrator
Renesys Corporation
603-643-9300 x 111
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Thu Jul 20 04:36:12 2006

This is an archived mail posted to the Subversion Users mailing list.