problem with svn access file ...

[Roberto Alejandro Espi Muñoz <ra...@estudiantes.uci.cu>]

Hi !!, I'm trying to restrict user access to specific SVN repository directories.  I'm using PAM with LDAP authentication.  The problem is when I try to use system groups.  For example:

[/branches]
teratux = rw

Here teratux has full RW access to that directory.  He's a user in my LDAP server.  In that server he's also a member of the group "scada".  Now, the last example works but this one does not.

[/branches]
@scada = rw

Here I try to give the PAM-LDAP group "scada" all the permissions, but it doesn't recognize it.  If I do this then it does:

[groups]
scada = teratux

[/branches]
@scada = rw

It only works when I define the group in my access file but I want it to be able to recognize all groups in my LDAP server through PAM.  Can U please advice ???

Thanks

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: problem with svn access file ...

[Paul <al...@gmail.com>]

Roberto,
I do not believe that any group information is passed from Apache
authentication to SVNAuthZ.
You will still have to maintain your groups inside your access file as
you have discovered.

Regards,
Paul

On 2/23/07, Roberto Alejandro Espi Muñoz <ra...@estudiantes.uci.cu> wrote:
> Hi !!, I'm trying to restrict user access to specific SVN repository directories.  I'm using PAM with LDAP authentication.  The problem is when I try to use system groups.  For example:
>
> [/branches]
> teratux = rw
>
> Here teratux has full RW access to that directory.  He's a user in my LDAP server.  In that server he's also a member of the group "scada".  Now, the last example works but this one does not.
>
> [/branches]
> @scada = rw
>
> Here I try to give the PAM-LDAP group "scada" all the permissions, but it doesn't recognize it.  If I do this then it does:
>
> [groups]
> scada = teratux
>
> [/branches]
> @scada = rw
>
> It only works when I define the group in my access file but I want it to be able to recognize all groups in my LDAP server through PAM.  Can U please advice ???
>
> Thanks
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

problem with svn access file ...

[Roberto Alejandro Espi Muñoz <ra...@estudiantes.uci.cu>]

Hi !!, I'm trying to restrict user access to specific SVN repository directories.  I'm using PAM with LDAP authentication.  The problem is when I try to use system groups.  For example:

[/branches]
teratux = rw

Here teratux has full RW access to that directory.  He's a user in my LDAP server.  In that server he's also a member of the group "scada".  Now, the last example works but this one does not.

[/branches]
@scada = rw

Here I try to give the PAM-LDAP group "scada" all the permissions, but it doesn't recognize it.  If I do this then it does:

[groups]
scada = teratux

[/branches]
@scada = rw

It only works when I define the group in my access file but I want it to be able to recognize all groups in my LDAP server through PAM.  Can U please advice ???

Thanks

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org