[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Réf. : Re: authz and ldap groups svn 1.4.6 apache 2.2.3

From: Johan Bogema <johan_at_bogema.nl>
Date: Thu, 17 Apr 2008 10:43:00 +0200

Is this also the way that usernames are transferred to your LDAP
system? in my case with AD it needs the following setup:

groupname=DOMAIN\username,UsErName

You can find the way the username is written in your Apache log files
if you enable the combined log format. (In my case it said DOMAIN\
\username)

Regards,

On 17 apr 2008, at 10:29, salim.sahbatou_at_mpsa.com wrote:
>
> Here is the content of svn-http.authz
>
> [groups]
>
> committers =John
> readers =John
>
>
> [/securecode]
> @committers = rw
> @readers = r
>
>
>
>
>
> Johan Bogema <johan_at_bogema.nl>
> 16/04/2008 20:08
>
> Pour
> salim.sahbatou_at_mpsa.com
> cc
> Objet
> Re: authz and ldap groups svn 1.4.6 apache 2.2.3
>
>
>
>
>
> how does the file svn-http.authz look like? This might be caused by
> the setup of that file.
>
> On 16 apr 2008, at 15:04, salim.sahbatou_at_mpsa.com wrote:
>
>
> Hello,
>
> we are currently using LDAP groups to define access to our
> repository configured as an apache module,
>
> but we want to give fine access to a part of our repository using
> also an AuthzSVNAccessFile
>
> For instance, we need that only members of the LDAP group
> projectTeam could access to the repository but only John should be
> able to access to
> /securecode directoy.
>
> I tried the configuration below but the LDAP group seems to be
> Ignored.
>
> How can I solve this problem ?
>
> AuthzSVNAccessFile /usersdev/xxxx/permissions/svn-http.authz
> AuthLDAPBindDN cn=xxxx,ou=xxx,o=xxxx
> AuthLDAPBindPassword xxxxx
> AuthzLDAPAuthoritative on
> AuthBasicProvider ldap
> AuthLDAPUrl ldap://xxx:389/o=xxx?uid?sub
> AuthType basic
> AuthName "Authentification pour le référentiel Subversion"
> Require valid-user
> Require ldap-group cn=projectTeam,ou=xxxxx,o=xxxx
>
>
>
>
>
Received on 2008-04-17 10:43:28 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.