CAS and Subersion
Jehan PROCACCIA
Jehan.Procaccia at int-evry.fr
Wed Nov 8 04:12:36 EST 2006
Eric Faden wrote:
> What is the best way to get Apache 2.2, SVN, and CAS to place nice.
> Currently I have AuthCAS set on the /svn directory, which "works" but
> the clients get pissed off because /svn is a redirect to the cas
> stuff.. What are people using for authenticating SVN with either CAS
> or straight LDAP?
>
> -Eric
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
I 've encountered the same probleme. Indeed CAS redirects work fine for
browser but not for svn dedicated clients (like turtoise for example).
for this I had to set 2 configurations in apache. One for turtoise with
mod_ldap.so and mod_authnz_ldap.so, example:
<Location "/svn/eph">
DAV svn
SSLRequireSSL
SVNParentPath /svn/eph
AuthzSVNAccessFile /svn/authz.eph
#AuthzSVNAccessFile /svn/s2ia/tutu/conf/authz
AuthType Basic
AuthName "SVN mod_ldap"
AuthBasicProvider ldap
AuthLDAPURL
"ldap://ldapserver.int-evry.fr:389/ou=people,dc=int-evry,dc=fr?uid?sub?(objectClass=*)"
require valid-user
</Location>
and an other one for browsers with CAS, here is a sample with the
"enhanced" svnwiew php program ( I had to disable CAS -> satisfy any,
for templates which contains css and images and are not showing up with
CAS as well :-( ) .
<Directory /var/www/html/svnview-s2ia/templates>
Order Allow,Deny
Allow from all
satisfy any
</Directory>
<Directory /var/www/html/svnview-s2ia>
AuthType CAS
AuthName "INT auth"
Require valid-user
#satisfy any
</Directory>
If someone has a better solution , I'll take it .
More information about the cas
mailing list