Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of j.zuckerman@gmail.com
 designates 209.85.217.157 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to
         :cc:content-type:content-transfer-encoding;
        b=IzrwaAR8MXTms2bx20uQoIryAEuPOCMX9tD70o5d+3ywlT88FCLI2/NAhYHv3OneSE
         wk//NhmxH7OIJEAm1EKGC5qBaZzc+DCVbReiNgJBuXkkJkbZ6h0Y8WOBaZApoCv3tmyK
         1LTSkJR7onK74bF+caBt2ybcF9ov58lHPXbHo=
MIME-Version: 1.0
In-Reply-To: <1241886881.15790.17.camel@corn.betterworld.us>
References: <1241886881.15790.17.camel@corn.betterworld.us>
From: Jonathan Zuckerman <j.zuckerman@gmail.com>
Date: Sun, 10 May 2009 16:13:44 -0700
Message-ID: <5ddb50770905101613qb66a381n3243638a9e52ce87@mail.gmail.com>
To: users@httpd.apache.org
Cc: ross@biostat.ucsf.edu
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Subject: Re: [users@httpd] authentication question

On Sat, May 9, 2009 at 9:34 AM, Ross Boylan <ross@biostat.ucsf.edu> wrote:
> Suppose I have apache running in front of a web application and
> subversion.
>
> I am thinking of a scenario in which the web application provides a
> login page. =A0However, the user may also browse to web pages served by
> subversion.
>
> Is there a way that my app can have someone log in and then pass the
> identity and authentication "up" to appache? =A0In particular, I'd want
> this authentication used if the user browsed over to the subversion
> repository.
>
> I'm assume a common source, e.g., LDAP, will provide user and password
> information that is the same for my app and apache.
>
> A final wrinkle is that the application itself may access subversion via
> http:// (https?) using either the identity of the user or, perhaps, a
> separate identity the application runs under.
>
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project=
.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> =A0 " =A0 from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

This is a good question, it would be nice to use Apache to
authenticate all those pages instead of having to include your own
application's authentication in every page.  Let us know if you do
find a solution for this, I'd be interested to hear how it turns out.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org