[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Apache2/SVN Public Key Authentication

From: Sam Barnett-Cormack <s.barnett-cormack_at_lancaster.ac.uk>
Date: Thu, 17 Jul 2008 17:22:11 +0100

Mark K wrote:
> On Thu, 17 Jul 2008 06:13:18 -0700 (PDT)
> BRM <bm_witness_at_yahoo.com> wrote:
>
>>> ----- Original Message ----
>>> From: Mark K <mark_at_mitsein.net>
>>> To: users_at_subversion.tigris.org
>>> Sent: Wednesday, July 16, 2008 2:38:56 PM
>>> Subject: Re: Apache2/SVN Public Key Authentication
>>> On Wed, 16 Jul 2008 07:41:34 -0700 (PDT)
>>> BRM <bm_witness_at_yahoo.com> wrote:
>>>> A colleague and I are working on switch over a system from CVS to
>>>> SVN. Under CVS we are using SSH with shared keys, and we would
>>>> like to do the same under a WebDAV hosted SVN repository system,
>>>> falling back to passwords only (if) necessary. (I realize web
>>>> browsers won't support the shared keys authentication, but that's
>>>> okay.) Is anyone aware of an Apache2 module (Apache 2.0, debian
>>>> sarge) that would be able to offer this support?
>>> Why wouldn't you just keep using ssh with shared keys with svn?
>>>
>> B/c using svnserve or file access (as with svn+ssh) leads to
>> permissions problems that are easily solved by using Apache2
>> WebDAV/SVN, and hosting over Apache2 WebDAV is far easier to maintain.
>>
>> Ben
>>
>>
>
> Aren't you already doing that with CVS?
>
> At any rate, I don't think you can do publickey authen against Apache,
> but you _can_ do authen by client certificates. However, I am not sure
> that something like that would work with subversion.

Any method of authentication you can use with apache, you can use with
mod_dav_svn. Well, if you're then using authz it has to be a method that
yields a username, but that's the vast majority of them. mod_ssl can do
client certificate auth, IIRC, but I'm not sure what you mean by "public
key". It's either public/private, or shared secret.

Sam

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org
Received on 2008-07-17 18:22:45 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.