hooking apache auth to unix accounts

[Ben Anderson <be...@gmail.com>]

Hi,
I'm trying to move my company's cvs repos to svn repos and was told if
I can get it up and running for people to try it out, then maybe we'll
use it.  I've setup svn repos and apache before, but only with basic
authentication.  What I'd like to do is setup authentication so that
apache authenticates users the same way our solaris system does.  I'm
not really worried about authorization at this point.  Does anyone
know how to do this?  Is this a more general Apache question?  Any
help is greatly appreciated (even if you just point me somewhere
else).
Thanks,
Ben

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: hooking apache auth to unix accounts

[Frank Gruman <fg...@verizon.net>]

Jeff Marder wrote:
> >I use mod_auth_pam on Linux with pam configured to use both the local
> >password file and an NT domain for subversion and several other
> >web services.  I'm not sure about solaris, though.
>
> I remember looking at that about a month ago. It kind of made me 
> nervous that right on the front page they say that it's no longer 
> supported/developed, but it mostly works. They recommend using 
> mod_authnz_external (http://unixpapa.com/mod_authnz_external/). I 
> spent a few minutes trying to get it to work and then gave up. I just 
> didn't feel like tinkering with it all afternoon. Has anyone else used 
> this?
>
>
>
>
I had set up mod_authnz_external on my personal box and had it working 
fine.  It was reading from my local Linux accounts without any problems.

It took me about an hour to get it installed / setup / working when I 
read through the instructions.

Regards,
Frank

Re: hooking apache auth to unix accounts

[Jeff Marder <je...@yahoo.com>]

>I use mod_auth_pam on Linux with pam configured to use both the local
>password file and an NT domain for subversion and several other
>web services.  I'm not sure about solaris, though.

I remember looking at that about a month ago. It kind of made me nervous that right on the front page they say that it's no longer supported/developed, but it mostly works. They recommend using mod_authnz_external (http://unixpapa.com/mod_authnz_external/). I spent a few minutes trying to get it to work and then gave up. I just didn't feel like tinkering with it all afternoon. Has anyone else used this?

Re: hooking apache auth to unix accounts

[Les Mikesell <le...@gmail.com>]

On Tue, 2006-09-19 at 12:16 -0700, Mark wrote:
> Well, if your solaris system uses ldap auth, you're golden :).  If
> not, you get creative.  Before we went ldap, I just plucked the user
> ids and encrypted passwords from /etc/shadow every hour and put them
> into a file for svn to use.
> 
> AuthUserFile /svnroot/.master-passwd
> 
> Work fine, but your solaris box may still be using crypt passwords
> instead of MD5, so I don't know if that will work.
> 
> There is/was an experimental PAM apache module out there, but I don't
> know if it ever worked.

I use mod_auth_pam on Linux with pam configured to use both the local
password file and an NT domain for subversion and several other
web services.  I'm not sure about solaris, though.

-- 
  Les Mikesell
    lesmikesell@gmail.com


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: hooking apache auth to unix accounts

[Mark <ma...@mitsein.net>]

Well, if your solaris system uses ldap auth, you're golden :).  If
not, you get creative.  Before we went ldap, I just plucked the user
ids and encrypted passwords from /etc/shadow every hour and put them
into a file for svn to use.

AuthUserFile /svnroot/.master-passwd

Work fine, but your solaris box may still be using crypt passwords
instead of MD5, so I don't know if that will work.

There is/was an experimental PAM apache module out there, but I don't
know if it ever worked.

On 9/19/06, Ben Anderson <be...@gmail.com> wrote:
> Hi,
> I'm trying to move my company's cvs repos to svn repos and was told if
> I can get it up and running for people to try it out, then maybe we'll
> use it.  I've setup svn repos and apache before, but only with basic
> authentication.  What I'd like to do is setup authentication so that
> apache authenticates users the same way our solaris system does.  I'm
> not really worried about authorization at this point.  Does anyone
> know how to do this?  Is this a more general Apache question?  Any
> help is greatly appreciated (even if you just point me somewhere
> else).
> Thanks,
> Ben
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>


-- 
Mark
"Blessed is he who finds happiness in his own foolishness, for he will
always be happy."

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org