cas + apache + svn

Matt Smith matt at forsetti.com
Mon Mar 10 20:48:38 EDT 2008


It *is* possible to protect SVN's simple browser access with CAS.

It *is not* possible to protect SVN access from non-browser access, such as
the command line svn tools, or TortoiseSVN, etc.

Personally, I use Kerberos as the primary authentication system.  My CAS
server authenticates against Kerberos, and my web apps are CAS-enabled.  My
non-web apps are Kerberos-enabled.  I use mod_auth_kerb to protect my SVN
repository.  The svn command line tools, and TortoiseSVN support kerberized
("negotiate" or SPNEGO) access.

I use CAS to protect Trac (or any other web based subversion display such as
ViewVCS).

HTH,
-Matt
On Mon, Mar 10, 2008 at 1:13 PM, m.garuti at quix.it <m.garuti at quix.it> wrote:

> Hi,
>
> I have a customer that wants to integrate a .net application with svn
> repository (to version xml files from .net code)
> There are also other modules that are written in java and are under cas
> server.
>
> the schema is:
>
> 1. user ==> .net app (non-web) ==> svn repository
> 2. user (browser) ==>  webapp under cas
>
> For schema 2 there are no problem...
> For schema 1, i know svn run under apache and there is a module for
> cas+apache (mod_auth_cas)
>
> the question is: is possible to integrate apache+svn+cas? so only cas
> konw how to authenticate users..
>
> thant in advance
> paco
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>



-- 
matt at forsetti.com
Key ID:D6EEC5B5
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20080310/6cfc2b23/attachment.html 


More information about the cas mailing list