LDAP with fallback to FILE-based authentication for svn using apache2 -
hy,
i implement svn-server authenticates users via ldap protocol against ad. use apache2 version 2.2.14 accessing repository (http). works far.
i want enhance config simple 'svn-file-based' authentication in case of user couldn't authenticated via ldap (because not defined in ad). try way:
my root-location:
<location /> authtype basic authname "<dns-name-of-server>" # ldap enough (works me) #authbasicprovider ldap #authzldapauthoritative on # want this... # these 2 lines should make it, understand apache2 documentation authbasicprovider ldap file authzldapauthoritative off authldapurl "ldap://my.server.com:3268/dc=mydomain,dc=com?samaccountname" none authldapbinddn "cn=serviceusers,ou=users,dc=mydomain,dc=com" authldapbindpassword "secret" authuserfile /etc/svn/svn-auth # contains svn users, not listed in ad authzsvnaccessfile /etc/svn/svn-access # handles path-based authorisation require valid-user </location>
one of many sub locations (the different repositories):
<location /repos1> dav svn svnpath /opt/svn/repos1 # again: authuserfile /etc/svn/svn-auth # contains svn users, not listed in ad authzsvnaccessfile /etc/svn/svn-access # handles path-based authorisation require valid-user </location>
that doesn't work. after reloading apache2, i'm still able authenticate users listed in ad, fallback file-based authentication doesn't work. apache-module enabled (mods-enabled/authn_file.load present)
maybe 1 additional hint: configuration allows multiple-repository-access approach via http , svn protocol.
thanks in advance replies.
best regards itl
my setup similar , works, maybe should try moving according order, , configure maximum httpd debug log level.
<location /repos1> require valid-user dav svn svnpath /opt/svn/repos1 # again: authzsvnaccessfile /etc/svn/svn-access # handles path-based authorisation # fallback: authuserfile /etc/svn/svn-auth # contains svn users, not listed in ad create using htpasswd </location>
Comments
Post a Comment