You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Min ZOU <zo...@renesas.com> on 2006/03/20 07:04:34 UTC
SSPI support in Linux
Hi,
If I install Subversion in Linux (say, Debian), is it possible to use
Windows Domain authentication through SSPI protocol?
Thanks!
--
Best Regards
ZM
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: SSPI support in Linux
Posted by Samay <ge...@hotmail.com>.
> Hi Shirish,
>
> On 3/20/2006 3:33 PM, Samay wrote:
>>> If I install Subversion in Linux (say, Debian), is it possible to use
>>> Windows Domain authentication through SSPI protocol?
>>>
>>
>>
>> for Linux + apache + mod_dav_svn,
>>
>> You can use mod_auth_kerb for Auhentication against win2k / win2k3 DC's.
>> more details at http://www.grolmsnet.de/kerbtut/
>>
>> or you may also use mod_auth_pam for both both User & Group support using
>> with Samba/winbind
>>
>> or you may use mod_auth_ldap for very fine grain control via Active
>> Directory.
>>
>
> Thanks for your tips! For all the 3 solutions mentioned, I can still use
> the original Windows Domain login password without creating a new set of
> authentication accounts, right?
thats correct. They all can user authentication against user accounts in
Microsoft Active Directory. Mod_auth_kerb using gssapi also gives u single
sign on. See the URL above for details.
..Shirish
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: SSPI support in Linux
Posted by Min ZOU <zo...@renesas.com>.
Hi Shirish,
On 3/20/2006 3:33 PM, Samay wrote:
>> If I install Subversion in Linux (say, Debian), is it possible to use
>> Windows Domain authentication through SSPI protocol?
>>
>
>
> for Linux + apache + mod_dav_svn,
>
> You can use mod_auth_kerb for Auhentication against win2k / win2k3 DC's.
> more details at http://www.grolmsnet.de/kerbtut/
>
> or you may also use mod_auth_pam for both both User & Group support
> using with Samba/winbind
>
> or you may use mod_auth_ldap for very fine grain control via Active
> Directory.
>
Thanks for your tips! For all the 3 solutions mentioned, I can still use
the original Windows Domain login password without creating a new set of
authentication accounts, right?
--
Best regards,
Min
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: SSPI support in Linux
Posted by Min ZOU <zo...@renesas.com>.
Hi Samay,
I have successfully integrated Windows domain authentication with
Subversion on my debian box (Linux + Apache2 + mod_dav_svn) using
winbind/samba/pam/mod_auth_pam.
It took me a while to figure out how to use pam, e.g. let pam_winbind.so
and pam_unx.so play nicely together for apache.
mod_auth_kerb looks cool but it requires additional admin work at
Windows side, which I cannot access.
Anyway thanks!
On 3/20/2006 3:33 PM, Samay wrote:
> ----- Original Message ----- From: "Min ZOU" <zo...@renesas.com>
> To: <us...@subversion.tigris.org>
> Sent: Monday, March 20, 2006 6:04 PM
> Subject: SSPI support in Linux
>
>
>> Hi,
>>
>> If I install Subversion in Linux (say, Debian), is it possible to use
>> Windows Domain authentication through SSPI protocol?
>>
>
>
> for Linux + apache + mod_dav_svn,
>
> You can use mod_auth_kerb for Auhentication against win2k / win2k3 DC's.
> more details at http://www.grolmsnet.de/kerbtut/
>
> or you may also use mod_auth_pam for both both User & Group support
> using with Samba/winbind
>
> or you may use mod_auth_ldap for very fine grain control via Active
> Directory.
>
> regards,
>
> Shirish
--
Best Regards
Min
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: SSPI support in Linux
Posted by Samay <ge...@hotmail.com>.
----- Original Message -----
From: "Min ZOU" <zo...@renesas.com>
To: <us...@subversion.tigris.org>
Sent: Monday, March 20, 2006 6:04 PM
Subject: SSPI support in Linux
> Hi,
>
> If I install Subversion in Linux (say, Debian), is it possible to use
> Windows Domain authentication through SSPI protocol?
>
for Linux + apache + mod_dav_svn,
You can use mod_auth_kerb for Auhentication against win2k / win2k3 DC's.
more details at http://www.grolmsnet.de/kerbtut/
or you may also use mod_auth_pam for both both User & Group support using
with Samba/winbind
or you may use mod_auth_ldap for very fine grain control via Active
Directory.
regards,
Shirish
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org