[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

[SOLVED] Re: Mapping Apache usernames -> subversion usernames

From: Wesley J. Landaker <wjl_at_icecavern.net>
Date: 2006-10-24 18:16:48 CEST

On Friday, 20 October 2006 16:49, Wesley J. Landaker wrote:
> For example, I am using apache2 with mod_auth_kerb so usernames show up
> as "user@REALM.EXAMPLE.ORG".
[...]
> Since every user maps to user@example.org, and there only is one realm, I
> would like them to show up in subversion simply as "user". It seems like
> there has got to be a way[1] to do this easily, either via subversion or
> apache.

Well, after messing around with mod_auth_kerb a little bit and looking at it's
crazy code, I realized that it was going to be easiest to take another path:

Now I'm just using mod_auth_pam. I use the following apache config:

<Location /svn/XXX>
  DAV svn
  SVNPath /srv/svn/repos/XXX
  SSLRequireSSL
  AuthPAM_Enabled on
  AuthType Basic
  Require valid-user
  AuthName "XXX Subversion Repository"
  AuthzSVNAccessFile /srv/svn/repos/XXX/conf/authz.conf
</Location>

Since I do not have nor want actual local users on my system for every person
accessing Subversion, I then use an apache2 pam config something like this:

auth required pam_krb5.so ignore_root
account required pam_krb5.so

Anyway, maybe that will help if anyone else is trying to do something similar.

-- 
Wesley J. Landaker <wjl@icecavern.net>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Tue Oct 24 18:17:47 2006

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.