svn+ Apache + LDAP configuration:
<location/> # Uncomment this to enable the repository DAV SVN # Set this to the path to your repository #SVNPat H/VAR/LIB/SVN # Alternatively, use Svnparentpath if you had multiple repositories under # under a single directory (/V AR/LIB/SVN/REPO1,/var/lib/svn/repo2, ...). # You need either Svnpath and Svnparentpath, but not both. SVNPARENTPATH/OPT/SVN # Access control is do at 3 levels: (1) Apache authentication, via # Any of several methods. A "Basic Auth" section was commented out # below. (2) Apache <Limit> <limitexcept>, also commented out # below. (3) MOD_AUTHZ_SVN is a svn-specific authorization module # which offers fine-grained read/write access control for paths # within a repository. (The first and layers is coarse-grained; you can only enable/disable access to an entire repository.) Note that # MOD_AUTHZ_SVN are noticeably slower than the other and the layers, so if # you don ' t need the fine-grained contro L, don ' t configure it. # Basic authentication is repository-wide. It is a not secure unless # that is using HTTPS. See the ' htpasswd ' command to create and # manage the password File-and the documentation for the # ' Auth_basic ' and ' Authn_file ' modules, which you'll need for the # (enable them with ' a2enmod '). AuthType Basic authname "Subversion Repository" #AuthUserFile/etc/apache2/dav_svn.passwd # to enable authorization via MOD_AUTHZ_SVN authzsvnaccessfile/etc/apache2/dav_svn.authz#------------------------ LDAP Configuration------------------------------------------# can use other authentication methods (e.g., password file) authzldapauthoritative off # op If LDAP cannot find an account ENLDAP Management Account Authldapbinddn "cn=admin,dc=zdy,dc=org" Authldapbindpassword admin authbasicprovider LDAP # certified data Source: "Dc=zd Y,dc=org "The UID of all child entity as the authenticated user name Authldapurl" Ldap://192.168.2.209:389/dc=zdy,dc=org?uid?sub? (objectclass=*) "# Set directory permissions, implement list all project catalog Options Indexes followsymlinks Order allow,deny allow from all#----------------- ---------------------------------------------------# The following three lines allow anonymous read, but make # Committers authenticate themselves. It requires the ' Authz_user ' # module (enable it with ' a2enmod '). #<limitexcept GET PROPFIND OPTIONS report> Require valid-user #</limitexcept> </Location>
svn+ Apache + LDAP configuration