2010-01-24 14:34:03 +00:00
|
|
|
#
|
|
|
|
|
# This file contains sample configuration to enable LDAP authentication
|
|
|
|
|
# for subversion webdav access. The actual configuration can be more
|
|
|
|
|
# complex than this file depending on your requirement.
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
<Location "/svn">
|
2010-07-26 14:02:17 +00:00
|
|
|
DAV svn
|
|
|
|
|
SVNParentPath "@DEPOTDIR@/svnrepo"
|
2011-12-17 07:51:20 +00:00
|
|
|
#SVNListParentPath on
|
2010-07-26 14:02:17 +00:00
|
|
|
|
|
|
|
|
Order deny,allow
|
|
|
|
|
#Deny from all
|
|
|
|
|
#Satisfy any
|
2010-01-24 14:34:03 +00:00
|
|
|
|
|
|
|
|
# Uncomment SSLRequireSSL below to disallow non-SSL access.
|
|
|
|
|
# Note that SSL must be enabled site-wide to use it.
|
|
|
|
|
# SSLRequireSSL
|
|
|
|
|
|
2010-07-26 14:02:17 +00:00
|
|
|
AuthType Basic
|
|
|
|
|
AuthName "@PACKAGE@"
|
2010-01-24 14:34:03 +00:00
|
|
|
|
|
|
|
|
#
|
|
|
|
|
# configure authentication below
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
#
|
|
|
|
|
# Apache version 2.1 or later
|
|
|
|
|
# mod_authnz_ldap
|
|
|
|
|
#
|
2010-07-26 14:02:17 +00:00
|
|
|
AuthBasicProvider ldap
|
2010-01-24 14:34:03 +00:00
|
|
|
|
|
|
|
|
# prevent other authenticatication moudles from authenticating users
|
2010-02-23 13:46:25 +00:00
|
|
|
# if this one fails. Set it to 'off' for 'require valid-user' as it
|
|
|
|
|
# is handled by mod_authz_user.
|
2010-07-26 14:02:17 +00:00
|
|
|
AuthzLDAPAuthoritative on
|
2010-01-24 14:34:03 +00:00
|
|
|
|
2010-07-26 14:02:17 +00:00
|
|
|
AuthLDAPGroupAttribute memberUid
|
|
|
|
|
AuthLDAPGroupAttributeIsDN off
|
|
|
|
|
AuthLDAPRemoteUserIsDN off
|
2010-01-24 14:34:03 +00:00
|
|
|
|
2010-02-23 13:46:25 +00:00
|
|
|
# ldap binding information
|
2010-07-26 14:02:17 +00:00
|
|
|
AuthLDAPURL ldap://127.0.0.1:389/ou=users,dc=sample,dc=net?uid
|
|
|
|
|
AuthLDAPBindDN cn=admin,dc=sample,dc=net
|
|
|
|
|
AuthLDAPBindPassword xxxxxxx
|
|
|
|
|
|
|
|
|
|
#Require ldap-group cn=users,ou=groups,dc=sample,dc=net
|
|
|
|
|
|
2014-05-15 16:17:21 +00:00
|
|
|
# Enable find-grained access control using the access file.
|
|
|
|
|
# The specified file must be located under the repository/conf subdirectory.
|
|
|
|
|
# AuthzSVNRespsRelativeAccessFile requried subversion 1.7 or later.
|
|
|
|
|
# If you're using a older version, there are no automatic repostory
|
|
|
|
|
# protection according to the project type (public/private)
|
|
|
|
|
# You may have to use AuthzSVNAccessFile for manual control globally
|
|
|
|
|
# in such a case.
|
|
|
|
|
# AuthzSVNReposRelativeAccessFile access.conf
|
|
|
|
|
# Satisfy All
|
|
|
|
|
|
|
|
|
|
# allow anynymous/guest for viewing and checking out
|
2010-07-26 14:02:17 +00:00
|
|
|
<Limit GET HEAD OPTIONS REPORT PROPFIND>
|
2014-05-15 16:17:21 +00:00
|
|
|
# Use 'Allow from all' to allow anonymous access.
|
|
|
|
|
#Allow from all
|
|
|
|
|
|
|
|
|
|
# 'Required valid-user' is more strict in that it requires a valid
|
|
|
|
|
# user name and password. You may create a guest account to supplement
|
|
|
|
|
# anonymous access.
|
|
|
|
|
Require valid-user
|
2010-07-26 14:02:17 +00:00
|
|
|
</Limit>
|
2010-01-24 14:34:03 +00:00
|
|
|
|
2010-07-26 14:02:17 +00:00
|
|
|
# require authentication for other operations
|
|
|
|
|
<LimitExcept GET HEAD OPTIONS REPORT PROPFIND>
|
|
|
|
|
Require ldap-group cn=coders,ou=groups,dc=sample,dc=net
|
|
|
|
|
</LimitExcept>
|
2010-01-24 14:34:03 +00:00
|
|
|
|
|
|
|
|
#
|
|
|
|
|
# Apache version 2.0.41
|
|
|
|
|
# mod_auth_ldap
|
|
|
|
|
#
|
|
|
|
|
</Location>
|
|
|
|
|
|
