www-infrastructure-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From chris <ch...@ia.gov>
Subject Re: LDAP - Next Steps
Date Tue, 26 May 2009 21:44:30 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


>> Of course there is always a 3rd hidden option, and that is to do away
>> with using the SVN Authz file completely, and use <location> stanza's
>> in httpd, and use mod_authz_ldap to control access this way.  Based on
>> some of my very simple testing, this option provides a slightly faster
>> turn around in changes, but it would require someone with root
>> privileges on eris/harmonia to be able to add new location tags, and
>> add new groups to an existing one.
> Hell yes to option #3

If you decide that you want to head in this direction, it would take very little effort to
adapt the scripts that I have
written to create the authz file from ldap groups + template to the task of generating INCLUDE
files with the location
stuff for httpd.

crr/arreyder.



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkocYr4ACgkQPmaZdRmQd+YF2gCeMo8XB5JFar6Zih6MErG+8HwV
KIgAoId4KwSxaYpJzkFcvgv9UFm/JVDz
=6dSA
-----END PGP SIGNATURE-----

Mime
View raw message