[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Subversion with LDAP - Display description

From: Maxter <maxter_at_hotmail.com>
Date: Fri, 2 Jul 2010 21:10:29 -0700 (PDT)

Well, we are using AD and when the user is in a group and I autorized the
group it's the description of the group I receive and not the one of the
user. Not very useful.

Leszek Szarlej wrote:
>
> Can you give more details? where did you get the group description ?
>
>
> On 2 July 2010 20:47, Jean-Francois Trepanier <maxter_at_hotmail.com> wrote:
>
>> I did a test and it worked... except that I received the description of
>> the
>> group and not the user.... Not great...
>>
>> maxter_at_hotmail.com
>>
>>
>>
>> ------------------------------
>> Date: Fri, 2 Jul 2010 19:35:31 +0200
>> Subject: Re: Subversion with LDAP - Display description
>> From: leszek.szarlej_at_gmail.com
>> To: alec.kloss_at_oracle.com
>> CC: maxter_at_hotmail.com; users_at_subversion.apache.org
>>
>>
>> Hi
>>
>> In our company we authenticate based on UserID, then we use email
>> address
>> for authz authentication.
>>
>>
>>
>> AuthLDAPURL
>> "ldap://bla.glob.com:389/(..)?UserID,mail?sub?(objectClass=*)"
>>
>> AuthzForceUsernameCase Lower
>>
>> AuthLDAPRemoteUserAttribute mail
>>
>> AuthLDAPRemoteUserIsDN on
>>
>> AuthzLDAPAuthoritative off
>>
>> AuthzSVNAccessFile "/opt/svn/svn_authz_access"
>>
>>
>>
>> In this example you need to have svn permissions defined as emails:
>>
>> [groups]
>>
>> abc_group = john.dejohn_at_example.com
>>
>>
>>
>> If the user does commit, you will have his email address in the log
>> history. This is very appreciated by our developers.
>>
>> All entries in access_log / error_log will have user email instead of his
>> id.
>>
>> Hope it will address your issue.
>>
>> Leszek
>>
>> On 2 July 2010 19:08, Alec Kloss <alec.kloss_at_oracle.com> wrote:
>>
>> On 2010-07-02 08:13, Maxter wrote:
>> >
>> > Hi,
>> > We did all necessary for the deployment of LDAP with
>> Apache/Subversion
>> > but I found a little thing that arrass me a little bit. When we do
>> commit,
>> > the user displayed is the username in the AD. The problem is that the
>> > username is a sequetial number so not really userful for knowing fast
>> who
>> > did the commit the last time. So my question is pretty simple... Is
>> there a
>> > way to display the Description found in the AD other than the username
>> for
>> > the UserID field in the commit information? If yes, how could we do
>> that?
>> >
>>
>> I use a post-commit hook to save the authentication ID as another
>> property and then reset the svn:author.
>>
>> --
>> Alec.Kloss_at_oracle.com Oracle Middleware
>> PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xEBD1FF14
>>
>>
>>
>> ------------------------------
>> Découvrez comment échanger avec vos vrais amis. Découvrez
>> comment!<http://go.microsoft.com/?linkid=9734392>
>>
>
>

-- 
View this message in context: http://old.nabble.com/Subversion-with-LDAP---Display-description-tp29057410p29062107.html
Sent from the Subversion Users mailing list archive at Nabble.com.
Received on 2010-07-03 06:11:07 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.