[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: SVN and Active Directory

From: Gronde, Christopher (Contractor) <Christopher.Gronde_at_fincen.gov>
Date: Tue, 19 Apr 2016 20:16:11 +0000

Unfortunately I fear that SSL is going to be a requirement for us. The client our users have been using is TortoiseSVN. 1.9 isn't supplied by Red Hat so maybe that is easier to get to play well with apache than 1.7 was for you?

From: jblist_at_icloud.com [mailto:jblist_at_icloud.com]
Sent: Tuesday, April 19, 2016 4:12 PM
To: Gronde, Christopher (Contractor) <Christopher.Gronde_at_fincen.gov>
Cc: users_at_subversion.apache.org
Subject: Re: SVN and Active Directory

On Apr 19, 2016, at 12:53 PM, Gronde, Christopher (Contractor) <Christopher.Gronde_at_fincen.gov<mailto:Christopher.Gronde_at_fincen.gov>> wrote:

Has anyone in here successfully integrated SVN with Active Directory for user authentication? We are currently using FreeIPA and user account management is the bane of my existence. If anyone has or knows of any documentation for integrating Active Directory with SVN (preferably 1.9 since we are going to upgrade to that version) that would be much appreciated.

I have, just recently in fact. The trick is to use SASL with LDAP. I only use authentication at this point and don't use AD groups for authorization.

I'm using a RHEL7 as my svn server which bundles SVN 1.7. I can't imagine the configuration of the server would be drastically different from 1.7 to 1.9.

So far the only burr in the saddle has been making sure the clients support SASL/PLAIN -- most do, but Eclipse with Subclipse was a failure.

As long as you're fine with passing credentials in cleartext, then this will work for you. If you need SSL encryption, then you will probably need to add Apache. Trying to get the RedHat-supplied svn and Apache components to work together was a non-starter, and trying to build everything from source on RHEL didn't work either.
Received on 2016-04-19 22:16:54 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.