On Wed, 2007-09-12 at 21:57 -0700, Mark Reibert wrote:
> On Wed, 2007-09-12 at 09:47 +0200, Rainer Sokoll wrote:
> > On Tue, Sep 11, 2007 at 10:55:34PM -0700, Mark Reibert wrote:
> > > On Tue, 2007-09-11 at 17:32 +0200, Rainer Sokoll wrote:
> > > > On Tue, Sep 11, 2007 at 07:16:54AM -0700, Peter Kirk wrote:
> > > > > We currently run subversion on linux but would like to
> > > > > change to windows "well the managers would" as with
> > > > > windows you can use windows domain authentication to
> > > > > sign into subversion through ldap.
> > > >
> > > > I do this with both apache 2.0.x and 2.2.x on linux - without any
> > > > problems.
> > >
> > > LDAP or Kerberos?
> >
> > LDAP.
> > apache 2.0.x: mod_auth_ldap.so
> > apache 2.2.x: mod_authnz_ldap.so
>
> And you can query a Windows DC? Cool. Where can one find the appropriate
> directory schema (or do you have an example)?
>
> > I've never got kerberos running on Linux - others did, so it must be my
> > fault.
>
> Same here, but I always attributed it to my lack of effort and almost
> complete lack of understanding of Kerberos ...
>
I have subversion on Linux authenticating users through the Active
Directory.
I setup samba on the subversion server, and joined it to the AD domain.
With samba I have winbind handle authentication of users.
I load the apache2 module mod-auth-pam, and my /etc/pam.d/apache2 is set
pam_winbind.so for authentication.
I let the windows group handle password account creation and password
resets. All I have to do is add the users to the subversion access
control list.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Thu Sep 13 19:53:30 2007