Return-Path: X-Original-To: apmail-subversion-users-archive@minotaur.apache.org Delivered-To: apmail-subversion-users-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 7D7CFD33B for ; Fri, 14 Sep 2012 22:45:32 +0000 (UTC) Received: (qmail 85268 invoked by uid 500); 14 Sep 2012 22:45:31 -0000 Delivered-To: apmail-subversion-users-archive@subversion.apache.org Received: (qmail 85242 invoked by uid 500); 14 Sep 2012 22:45:31 -0000 Mailing-List: contact users-help@subversion.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@subversion.apache.org Received: (qmail 85232 invoked by uid 99); 14 Sep 2012 22:45:31 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 14 Sep 2012 22:45:31 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: local policy) Received: from [66.111.4.25] (HELO out1-smtp.messagingengine.com) (66.111.4.25) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 14 Sep 2012 22:45:26 +0000 Received: from compute3.internal (compute3.nyi.mail.srv.osa [10.202.2.43]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id 8D3EC208B8; Fri, 14 Sep 2012 18:45:05 -0400 (EDT) Received: from frontend2.nyi.mail.srv.osa ([10.202.2.161]) by compute3.internal (MEProxy); Fri, 14 Sep 2012 18:45:05 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= daniel.shahaf.name; h=date:from:to:cc:subject:message-id :references:mime-version:content-type:in-reply-to; s=mesmtp; bh= mtx/aox0ZTnFEze9L6wWvn8o4Rk=; b=BnlfDL2nua5z+igULwSTPNf61SMVu7EK z+HfX5pt4SMYUf0L1STXBojTmN55dG2p+azGsi9tcbFHjMPENiQvrLigxmaIZS2O PhHB3RhgFW/Gb3Rq1NIn/xjsCZryH/0aGjfDdygaHJ6maTKLUlmsstZEyHSDTtgB P1KRojo7sDE= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=date:from:to:cc:subject:message-id :references:mime-version:content-type:in-reply-to; s=smtpout; bh=mtx/aox0ZTnFEze9L6wWvn8o4Rk=; b=IGAZ+IwIX8X/+ualjym7/5n/3UPu vX/4Vv9qQHA45Eu1lTIgeR5HpmUyFnIiOOOzo93nyRwIr3xLBvNhGAX3jc9qfro3 rSdX4G0Gc/ZjzaFjw6e5AfqMsPl6vlqZq25dXEL16hOPfbZbYvLxjc69cFzRDpPg OCeNsvkMxFJzhhs= X-Sasl-enc: CTUnYycx0rly86z+mq3YAJ3e2HOoV9/toKGDkL6eFyDJ 1347662705 Received: from tarsus.local2 (unknown [131.111.242.114]) by mail.messagingengine.com (Postfix) with ESMTPA id 17959483612; Fri, 14 Sep 2012 18:45:05 -0400 (EDT) Date: Fri, 14 Sep 2012 23:45:01 +0100 From: Daniel Shahaf To: Esmond Pitt Cc: users@subversion.apache.org Subject: Re: AuthzSVNAccessFile and [alias] Message-ID: <20120914224501.GA19576@tarsus.local2> References: <60E88CAE222A4A1895D56B8339E312B7@HP6910P> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <60E88CAE222A4A1895D56B8339E312B7@HP6910P> User-Agent: Mutt/1.5.21 (2010-09-15) X-Virus-Checked: Checked by ClamAV on apache.org To clarify, you want the left-hand side of an alias line to be the full DN, right? How is this going to work? Does our ini parser allow the LHS to contain embedded '=' sign? https://svn.apache.org/repos/asf/subversion/trunk/subversion/libsvn_subr/config_file.c http://docs.python.org/library/configparser Esmond Pitt wrote on Wed, Sep 12, 2012 at 16:08:00 +1000: > The value of an alias in the AuthzSVNAccess file seems constrained to be > whatever login name the user used. > > However I am using LDAP authentication, and it is preferable for me for it > to be the full DN of the user rather than whatever he supplied as the login > name. > > I have 'AuthLDAPRemoteUserIsDN on', which promotes this behaviour for the > REMOTE_USER variable within Apache. > > Is there a way of propagating that behaviour to the AuthzSVNAccess file? > > Thanks in advance > > EJP