[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Subversion with LDAP - Display description

From: Leszek Szarlej <leszek.szarlej_at_gmail.com>
Date: Sat, 3 Jul 2010 11:53:50 +0200

so, paste your svn config from apache and some content from authz file if
you want. I assume something must be wrong in it. You should get the
username (the extra field you listed in the LDAP url and configured as
Attribute).

Regards,
Leszek Szarlej

On 3 July 2010 06:10, Maxter <maxter_at_hotmail.com> wrote:

>
> Well, we are using AD and when the user is in a group and I autorized the
> group it's the description of the group I receive and not the one of the
> user. Not very useful.
>
>
>
> Leszek Szarlej wrote:
> >
> > Can you give more details? where did you get the group description ?
> >
> >
> > On 2 July 2010 20:47, Jean-Francois Trepanier <maxter_at_hotmail.com>
> wrote:
> >
> >> I did a test and it worked... except that I received the description of
> >> the
> >> group and not the user.... Not great...
> >>
> >> maxter_at_hotmail.com
> >>
> >>
> >>
> >> ------------------------------
> >> Date: Fri, 2 Jul 2010 19:35:31 +0200
> >> Subject: Re: Subversion with LDAP - Display description
> >> From: leszek.szarlej_at_gmail.com
> >> To: alec.kloss_at_oracle.com
> >> CC: maxter_at_hotmail.com; users_at_subversion.apache.org
> >>
> >>
> >> Hi
> >>
> >> In our company we authenticate based on UserID, then we use email
> >> address
> >> for authz authentication.
> >>
> >>
> >>
> >> AuthLDAPURL
> >> "ldap://bla.glob.com:389/(..)?UserID,mail?sub?(objectClass=*)"
> >>
> >> AuthzForceUsernameCase Lower
> >>
> >> AuthLDAPRemoteUserAttribute mail
> >>
> >> AuthLDAPRemoteUserIsDN on
> >>
> >> AuthzLDAPAuthoritative off
> >>
> >> AuthzSVNAccessFile "/opt/svn/svn_authz_access"
> >>
> >>
> >>
> >> In this example you need to have svn permissions defined as emails:
> >>
> >> [groups]
> >>
> >> abc_group = john.dejohn_at_example.com
> >>
> >>
> >>
> >> If the user does commit, you will have his email address in the log
> >> history. This is very appreciated by our developers.
> >>
> >> All entries in access_log / error_log will have user email instead of
> his
> >> id.
> >>
> >> Hope it will address your issue.
> >>
> >> Leszek
> >>
> >> On 2 July 2010 19:08, Alec Kloss <alec.kloss_at_oracle.com> wrote:
> >>
> >> On 2010-07-02 08:13, Maxter wrote:
> >> >
> >> > Hi,
> >> > We did all necessary for the deployment of LDAP with
> >> Apache/Subversion
> >> > but I found a little thing that arrass me a little bit. When we do
> >> commit,
> >> > the user displayed is the username in the AD. The problem is that the
> >> > username is a sequetial number so not really userful for knowing fast
> >> who
> >> > did the commit the last time. So my question is pretty simple... Is
> >> there a
> >> > way to display the Description found in the AD other than the username
> >> for
> >> > the UserID field in the commit information? If yes, how could we do
> >> that?
> >> >
> >>
> >> I use a post-commit hook to save the authentication ID as another
> >> property and then reset the svn:author.
> >>
> >> --
> >> Alec.Kloss_at_oracle.com Oracle Middleware
> >> PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xEBD1FF14
> >>
> >>
> >>
> >> ------------------------------
> >> Découvrez comment échanger avec vos vrais amis. Découvrez
> >> comment!<http://go.microsoft.com/?linkid=9734392>
> >>
> >
> >
>
> --
> View this message in context:
> http://old.nabble.com/Subversion-with-LDAP---Display-description-tp29057410p29062107.html
> Sent from the Subversion Users mailing list archive at Nabble.com.
>
>
Received on 2010-07-03 11:54:30 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.