Would someone be= willing to nitpick this configuration?

The goal is setting up a s= elf-signed certificate and enabling SSL and LDAP authentication for a subve= rsion repository.

This configurat= ion is located in subversion.conf

The version of Apache httpd in this subversion product is: 2.2.25

= This configuration is working, but I was hoping someone might spot somethin= g I’ve missed or perhaps suggest some best practices?

<= p class=3DMsoNormal>

# VirtualHost is set to: 8443 for SSL

= <VirtualHost *:8443>

KeepAlive On

# This directive toggles t= he usage of the SSL/TLS Protocol Engine. This should be used inside a <V= irtualHost> section to enable SSL/TLS for a that virtual host.

SSLEngine On

SSLCertificateFile = "C:\Program Files (x86)\Subversion\Apache2\ssl\apache.crt"

SSLCertificateKeyFile "C:\Program Files (x86)\Subv= ersion\Apache2\ssl\apache.key"

# The <Location> directive limits the scope of the= enclosed directives by URL, in this case the URL of /svn=

DAV svn

SVNParentPath &= quot;C:\repositories"

# Let the users browse the parent path /svn

SVNListParentPath on

<= /o:p>

# SVNParentPath and authz fix http://subversion.= tigris.org/issues/show_bug.cgi?id=3D2753

Re= directMatch ^(/svn)$ $1/

# Authentication: LDAP

Order= deny,allow

Deny from All=

AuthName "my auth name"

&= nbsp; AuthType Basic

AuthBasicProvider lda= p

# AuthzLD= APAuthoritative must be explicitly set because the default setting is "= ;on" and authentication attempts for valid-user will fail otherwise.

AuthzLDAPAuthoritative off=

# Note: We are only looking = for users that belong to a certain OU of yadda1

&n= bsp; AuthLDAPURL "ldap://servername.domain:389/OU=3Dyadda1,OU=3Dyadda,= DC=3Ddomain,DC=3Dorganization,DC=3Dgov?sAMAccountName?sub?(objectClass=3D*)= "

AuthLDAPBindDN "CN=3DAD Query A= ccount,OU=3DService Accounts,OU=3Ddept,DC=3Ddomain,DC=3Dorganization,DC=3Dg= ov"

AuthLDAPBindPassword bind_password=

= # If Authz= LDAPAuthoritative was set to 'on', then you can list required users in the = following directive

#Require user "m= e" "someotheruser"

# Grants access to any user that has successfu= lly authenticated during the search/bind phase

&nb= sp; Require valid-user

# Allows the request if any requirement is met (authentication = OR access), can use 'all' to force both requirements

<= p class=3DMsoNormal>

# Authorization: Path-based access control; authenticated users = can access paths for read/write specfied in this file.

AuthzSVNAccessFile "C:\svn_passwd\svn-auth.authz"

SVNAutoversion= ing on

</Location>

# Enable Subversion logging

CustomLog logs/subversion.log combined

</VirtualHost>

Leo