You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Jo De Troy <jo...@gmail.com> on 2007/10/02 09:00:39 UTC

path based authorization in LDAP

Hello,

I  was wondering if it is possible to store the path based
authorization config in LDAP instead of inside a text file on the
subversion server. That would allow easier management, or is there
already an existing way of getting the same result?  It would be nice
if eg LDAP admins can grant access to the repository without needing
themselves access to the subversion server.

I hope this wasn't asked and solved before.

Kind Regards,
Jo

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: path based authorization in LDAP

Posted by Andreas Hasenack <an...@mandriva.com.br>.
Em Ter, 2007-10-02 às 20:52 +0200, Jo De Troy escreveu:
> Hello Andreas,
> 
> could you share the patched svnparms.py and its svnperms.conf?

http://svn.mandriva.com/cgi-bin/viewvc.cgi/soft/build_system/svnperms/trunk/

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: path based authorization in LDAP

Posted by Jo De Troy <jo...@gmail.com>.
Hello Andreas,

could you share the patched svnparms.py and its svnperms.conf?

Thanks in advance,
Jo

On 02/10/2007, Andreas Hasenack <an...@mandriva.com.br> wrote:
> Em Ter, 2007-10-02 às 11:00 +0200, Jo De Troy escreveu:
> > Hello,
> >
> > I  was wondering if it is possible to store the path based
> > authorization config in LDAP instead of inside a text file on the
> > subversion server. That would allow easier management, or is there
> > already an existing way of getting the same result?  It would be nice
> > if eg LDAP admins can grant access to the repository without needing
> > themselves access to the subversion server.
>
> The closest thing we do is to use groups for authorization and store the
> group information in LDAP. We use a patched svnperms.py with this ldap
> support and its svnperms.conf file is mostly static, defining the ACLs
> using only groups.
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org


Re: path based authorization in LDAP

Posted by Andreas Hasenack <an...@mandriva.com.br>.
Em Ter, 2007-10-02 às 11:00 +0200, Jo De Troy escreveu:
> Hello,
> 
> I  was wondering if it is possible to store the path based
> authorization config in LDAP instead of inside a text file on the
> subversion server. That would allow easier management, or is there
> already an existing way of getting the same result?  It would be nice
> if eg LDAP admins can grant access to the repository without needing
> themselves access to the subversion server.

The closest thing we do is to use groups for authorization and store the
group information in LDAP. We use a patched svnperms.py with this ldap
support and its svnperms.conf file is mostly static, defining the ACLs
using only groups.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org