Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of owen.nick@gmail.com
 designates 209.85.146.183 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type:content-transfer-encoding;
        b=VsWMmYQO3HvmMaPdxFownRygMU6jOF9y+jq9lrOUKPwyH642Xbl4p0plLCNROfFeZP
         MNoQtH1QhUjv9kdfDcsP83H/xpJVpK7FAGgIo7p5qWbq4MNEyKudJJTbzX0YPejsbSDi
         6nKW4vc+KtgvFnVfU885dzXhFRk4kl8VuGkg4=
MIME-Version: 1.0
In-Reply-To: <1241886881.15790.17.camel@corn.betterworld.us>
References: <1241886881.15790.17.camel@corn.betterworld.us>
Date: Mon, 11 May 2009 11:21:06 -0400
Message-ID: <415a28910905110821s2f2f5cdfm6f5603748dd19b93@mail.gmail.com>
From: Nick Owen <owen.nick@gmail.com>
To: users@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Subject: Re: [users@httpd] authentication question

On Sat, May 9, 2009 at 12:34 PM, Ross Boylan <ross@biostat.ucsf.edu> wrote:
> Suppose I have apache running in front of a web application and
> subversion.
>
> I am thinking of a scenario in which the web application provides a
> login page. =A0However, the user may also browse to web pages served by
> subversion.
>
> Is there a way that my app can have someone log in and then pass the
> identity and authentication "up" to appache? =A0In particular, I'd want
> this authentication used if the user browsed over to the subversion
> repository.
>
> I'm assume a common source, e.g., LDAP, will provide user and password
> information that is the same for my app and apache.
>
> A final wrinkle is that the application itself may access subversion via
> http:// (https?) using either the identity of the user or, perhaps, a
> separate identity the application runs under.

Have you investigated single sign-on solutions such as CAS and OpenSSO?

--=20
Nick Owen
WiKID Systems, Inc.
404.962.8983
http://www.wikidsystems.com
Commercial/Open Source Two-Factor Authentication

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org