svn+spnego+require ldap-group

Is it possible to use "require ldap-group" with kerberos authentication? Kerberos authentication works fine with require valid-user, if i add require ldap-group i get an error trying to access my directory:

"Authorization Required

This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required."

Here's my subversion.conf

<Location /testsrc>
   DAV svn
   SVNPath /var/lib/subversion/repositories/testrc
   AuthType Kerberos
   KrbAuthRealms myserver.organization.country
   Krb5Keytab /etc/httpd/conf.d/svn.keytab
   KrbMethodNegotiate On
   KrbMethodK5Passwd Off
   KrbSaveCredentials On
   AuthName "Authorization Realm"
                                     
AuthBasicProvider ldap
AuthzLDAPAuthoritative on
AuthLDAPURL "ldap://adserver.domain.country:389/DC=domain,DC=country?sAMAccountName?sub?(objectClass=*)" NONE
AuthLDAPBindDN "CN=apachebind,CN=Users,DC=organization,DC=country"
AuthLDAPBindPassword hackme
Require ldap-group CN=svntest,CN=Users,DC=organization,DC=country
</Location>

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1523587

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-04-02 22:13:53 CEST