LDAP with fallback to FILE-based authentication for svn using apache2 -


hy,

i implement svn-server authenticates users via ldap protocol against ad. use apache2 version 2.2.14 accessing repository (http). works far.

i want enhance config simple 'svn-file-based' authentication in case of user couldn't authenticated via ldap (because not defined in ad). try way:

my root-location:

<location />         authtype basic   authname "<dns-name-of-server>"    # ldap enough (works me)   #authbasicprovider ldap   #authzldapauthoritative on    # want this...   # these 2 lines should make it, understand apache2 documentation   authbasicprovider ldap file   authzldapauthoritative off    authldapurl "ldap://my.server.com:3268/dc=mydomain,dc=com?samaccountname" none   authldapbinddn "cn=serviceusers,ou=users,dc=mydomain,dc=com"   authldapbindpassword "secret"    authuserfile /etc/svn/svn-auth # contains svn users, not listed in ad   authzsvnaccessfile /etc/svn/svn-access # handles path-based authorisation    require valid-user </location> 

one of many sub locations (the different repositories):

<location /repos1>   dav svn   svnpath /opt/svn/repos1    # again:   authuserfile /etc/svn/svn-auth # contains svn users, not listed in ad   authzsvnaccessfile /etc/svn/svn-access # handles path-based authorisation    require valid-user </location> 

that doesn't work. after reloading apache2, i'm still able authenticate users listed in ad, fallback file-based authentication doesn't work. apache-module enabled (mods-enabled/authn_file.load present)

maybe 1 additional hint: configuration allows multiple-repository-access approach via http , svn protocol.

thanks in advance replies.

best regards itl

my setup similar , works, maybe should try moving according order, , configure maximum httpd debug log level.

<location /repos1>   require valid-user   dav svn   svnpath /opt/svn/repos1    # again:   authzsvnaccessfile /etc/svn/svn-access # handles path-based authorisation   # fallback:   authuserfile /etc/svn/svn-auth # contains svn users, not listed in ad create using htpasswd  </location> 

Comments

Popular posts from this blog

monitor web browser programmatically in Android? -

Shrink a YouTube video to responsive width -

wpf - PdfWriter.GetInstance throws System.NullReferenceException -