RE: AuthzSVNAccessFile and [alias]

No, I want the RHS to be the full DN. Presently it has to be the email
address or nickname or whatever else the user actually typed into the login
dialog.

EJP
-----Original Message-----
From: Daniel Shahaf [mailto:d.s_at_daniel.shahaf.name]
Sent: Saturday, 15 September 2012 8:45 AM
To: Esmond Pitt
Cc: users_at_subversion.apache.org
Subject: Re: AuthzSVNAccessFile and [alias]

To clarify, you want the left-hand side of an alias line to be the full DN,
right?

How is this going to work? Does our ini parser allow the LHS to contain
embedded '=' sign?

https://svn.apache.org/repos/asf/subversion/trunk/subversion/libsvn_subr/con
fig_file.c
http://docs.python.org/library/configparser

Esmond Pitt wrote on Wed, Sep 12, 2012 at 16:08:00 +1000:
> The value of an alias in the AuthzSVNAccess file seems constrained to
> be whatever login name the user used.
>
> However I am using LDAP authentication, and it is preferable for me
> for it to be the full DN of the user rather than whatever he supplied
> as the login name.
>
> I have 'AuthLDAPRemoteUserIsDN on', which promotes this behaviour for
> the REMOTE_USER variable within Apache.
>
> Is there a way of propagating that behaviour to the AuthzSVNAccess file?
>
> Thanks in advance
>
> EJP
Received on 2012-09-17 01:52:39 CEST