Re: mod_auth_kerb and usernames

On Friday 09 March 2007 12:53, Michael Richters wrote:
> When using apache with mod_auth_kerb, $REMOTE_USER contains the whole
> kerberos principal name, including "@REALM". This makes it difficult
> to maintain a repository that uses both mod_auth_kerb and some other
> method of access. Is there any way to configure subversion so that
> the realm is stripped from the username?

I ran across this problem in one installation and ended up concluding that
to get it to work I'd have to either hack the mod_auth_kerb source, which
would be easy but a pain to track on upgrades, etc, or use principal@REALM
for usernames in SVN, which would be unacceptable.

So instead, I just used mod_auth_pam at let the Linux PAM system handle the
kerberos authentication transparently instead.

-- 
Wesley J. Landaker <wjl@icecavern.net> <xmpp:wjl@icecavern.net>
OpenPGP FP: 4135 2A3B 4726 ACC5 9094  0097 F0A9 8A4C 4CD6 E3D2