I suppose I should mention that this SVN instance in the near future
will be moved (somehow) to a RedHat EL 5 server and away from
Windows. Thus I essentially elected not to go the SSPI route. The
clients in our environment will continue to be Windows for the
foreseeable future however. Is it possible to use SSPI even if the
SVN instance sits on a linux server?
Robert
On Mar 15, 2007, at 2:06 PM, Brad Rhoads wrote:
> 1. Setup svn to use Apache with SSPI. Get mod_auth_sspi from here:
> http://www.gknw.net/development/apache/httpd-2.0/win32/modules/
> mod_auth_sspi-1.0.4-2.0.58.zip
>
> See http://tortoisesvn.net/docs/release/TortoiseSVN_en/tsvn-
> serversetup.html
> for more details on overall install, including info about SSPI. Pay
> close attention to how you edit Apache's httpd.conf file.
>
> 2. The end of your httpd.conf should look something like this. Note
> this gives you authentication, but not authorization; for that you'll
> need to use AuthzSVNAccessFile.
>
> <Location /svn>
> DAV svn
> SVNListParentPath on
> SVNParentPath E:\svn
> SVNAutoversioning on
> ModMimeUsePathInfo on
>
> AuthName "SVN Server"
> AuthType SSPI
> SSPIAuth On
> SSPIAuthoritative On
> SSPIDomain SPENCERSTUART
> SSPIOfferBasic on #let non-IE clients authenticate
> #SSPIOmitDomain On # keep domain name in userid string
> # passed down to mod_authz_svn
> Require valid-user # A Require directive may? prevent userid
> # strings from being passed down to
> mod_authz_svn
> # our access control policy enforced by mod_authz_svn
> #AuthzSVNAccessFile "d:/svndav/svnaccess.conf"
> </Location>
>
>
> 3. Download WebDrive from
> http://www.webdrive.com/products/webdrive/index.html. After the
> install, add a new site with the url, server type WebDav. Click
> Properties|HTTP Settings and disable (uncheck) "Enable persistent
> connections (Keep-Alive). After you have a connection, open the
> Program Settings|Cach Settings|Options and select Custom, Cache Files
> and check all options. Set all boxes to 10 seconds.
>
> 4. In you WebDrive and other connections to the repository, you're
> user id needs to be DOMAIN\userid, not just userid.
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Thu Mar 15 19:13:07 2007