You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Greg Thomas <th...@omc.bt.co.uk> on 2008/04/01 08:05:33 UTC

Re: Authentication in a domain

On Mon, 31 Mar 2008 17:51:42 +0100, "Adrian Marsh"
<Ad...@ubiquisys.com> wrote:

>Does that then mean that you don't use internal SVN authentication at
>all? And that you organise sub-folder permissions from within the apache
>URL??

Apache authenticates the user against AD.

Apache authorises the user using the Subversion module mod_authz_svn
(http://svnbook.red-bean.com/en/1.4/svn.serverconfig.pathbasedauthz.html)
giving access (or not) various paths within the repository. 

So really it's a combination of Apache & svn.

Greg
-- 
This post represents the views of the author and does
not necessarily accurately represent the views of BT.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

RE: Re: Authentication in a domain

Posted by Adrian Marsh <Ad...@ubiquisys.com>.
Hi Greg,

Yes, that one gives user-level permissions, do you know if its possible
to take a group approach? Eg a member of a 2003-group can access
/svn/repos/<somedir>  etc

(group control rather than a flat file)

Adrian

-----Original Message-----
From: Greg Thomas [mailto:thomasgd@omc.bt.co.uk] 
Sent: 01 April 2008 09:06
To: users@subversion.tigris.org
Subject: Re: Authentication in a domain

On Mon, 31 Mar 2008 17:51:42 +0100, "Adrian Marsh"
<Ad...@ubiquisys.com> wrote:

>Does that then mean that you don't use internal SVN authentication at
>all? And that you organise sub-folder permissions from within the
apache
>URL??

Apache authenticates the user against AD.

Apache authorises the user using the Subversion module mod_authz_svn
(http://svnbook.red-bean.com/en/1.4/svn.serverconfig.pathbasedauthz.html
)
giving access (or not) various paths within the repository. 

So really it's a combination of Apache & svn.

Greg
-- 
This post represents the views of the author and does
not necessarily accurately represent the views of BT.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org