[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Subversion authenticating to different domains

From: <kmradke_at_rockwellcollins.com>
Date: Wed, 21 May 2008 12:05:33 -0500

"Augusto Alvarez" <augusto.alvarez82_at_gmail.com> wrote on 05/20/2008
04:37:45 PM:
> Hello everyone,
> I'm doing some research about subversion deployment with apache2 and
> Active Directory. I had succesfully deployed a subversion installed on
> openSUSE 10.3 x86, apache2 2.2.4-70 and authenticating with single
> Active Directory... everything works great there.
> But I haven't found yet the way to accomplish for the SVN server manage

> authentication from two domains: I have two different domains
> and domainB.com) and I want to achieve that my subversion could
> any user from domainA.com and domainB.com... Basically I don't want to
> users on domainA.com that actually belongs to domainB.com, just for
> them to work on the same repositories.
> Is that in anyway possible???

Since you are using apache 2.2, look into using AuthnProviderAlias to
LDAP parameters for each domain, then use those aliases to
as a space separated list.

WARNING: You can only perform a "require valid-user" in this case, because
the alias functionality only works for authentication, NOT authorization.
(require ldap-user username or require ldap-group groupname will not

Apache 2.3/2.4 is changing the authentication stuff (again) and will
help this situation.

Kevin R.

To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org
Received on 2008-05-21 19:06:03 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.