Subversion with Active Directory authentication on PDC

I use CollabNetSubversion-server-1.6.9-1.win32.exe on PDC for revision control.

1. Install CollabNet Subversion server with HTTP service but without SVN service first (D:Program FilesCollabNet). Stop “CollabNet Subversion Apache” service.

2. Download mod_auth_sspi-1.0.4-2.2.3-w32.zip from http://sourceforge.net/projects/mod-auth-sspi/ . Copy mod_auth_sspi.so file to D:Program FilesCollabNetSubversion Serverhttpdmodules .

3. Edit D:Program FilesCollabNetSubversion Serverhttpdconfhttpd.conf file.

a) Uncomment line:

#LoadModule proxy_module modules/mod_proxy.so

(remove the leading “#”).

b) Add two lines:

LoadModule authz_svn_module   modules/mod_authz_svn.so
LoadModule sspi_auth_module   modules/mod_auth_sspi.so

c) Update “Location /svn” section from:

<Location /svn>
DAV svn
SVNParentPath E:svn_repository
</Location>

to:

<Location /svn>
DAV svn
SVNParentPath E:svn_repository
AuthName "EXAMPLE Revision Control Service"
AuthType SSPI
SSPIAuth On
SSPIOmitDomain On
SSPIAuthoritative On
SSPIDomain EXAMPLE
SSPIOfferBasic on
SSPIUsernameCase lower
SSPIPerRequestAuth on
Require valid-user
AuthzSVNAccessFile "E:/svn_repository/svnaccess.txt"
</Location>

d) Update “Location /viewvc” section from:

<Location /viewvc>
#Require valid-user
AuthType Basic
AuthName "Subversion repository"
#AuthUserFile "D:Program FilesCollabNetSubversion Server/httpd/conf/svn_auth_file"
</Location>

to:

<Location /viewvc>
AuthName "EXAMPLE Revision Control Service"
AuthType SSPI
SSPIAuth On
SSPIOmitDomain On
SSPIAuthoritative On
SSPIDomain EXAMPLE
SSPIOfferBasic on
SSPIUsernameCase lower
SSPIPerRequestAuth on
Require valid-user
AuthzSVNAccessFile "E:/svn_repository/svnaccess.txt"
</Location>

e) Run the following command in command prompt window to create a repository

cd E:svn_repository
svnadmin create repositoryname 

f) Create E:svn_repositorysvnaccess.txt file.

[groups]
developers=user01,user02,user03,user04
managers=user11,user12,user13
[repositoryname:path]
@developers = rw
@managers = r
user20 = rw

g) Now, start “CollabNet Subversion Apache” service.

Reference:

Windows Domain Authentication with SVN and Apache

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s