"Augusto Alvarez" <augusto.alvarez82_at_gmail.com> wrote on 05/20/2008
04:37:45 PM:
> Hello everyone,
>
> I'm doing some research about subversion deployment with apache2 and
Windows
> Active Directory. I had succesfully deployed a subversion installed on
> openSUSE 10.3 x86, apache2 2.2.4-70 and authenticating with single
Windows
> Active Directory... everything works great there.
>
> But I haven't found yet the way to accomplish for the SVN server manage
> authentication from two domains: I have two different domains
(domainA.com
> and domainB.com) and I want to achieve that my subversion could
authenticate
> any user from domainA.com and domainB.com... Basically I don't want to
create
> users on domainA.com that actually belongs to domainB.com, just for
allowing
> them to work on the same repositories.
>
> Is that in anyway possible???
Since you are using apache 2.2, look into using AuthnProviderAlias to
setup
LDAP parameters for each domain, then use those aliases to
AuthBasicProvider
as a space separated list.
WARNING: You can only perform a "require valid-user" in this case, because
the alias functionality only works for authentication, NOT authorization.
(require ldap-user username or require ldap-group groupname will not
work.)
Apache 2.3/2.4 is changing the authentication stuff (again) and will
hopefully
help this situation.
Kevin R.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org
Received on 2008-05-21 19:06:03 CEST