Mailing-List: contact users-help@subversion.apache.org; run by ezmlm
Precedence: bulk
Subject: Re: LDAP Usage Question
To: Dariusz Nowak <Dariusz.Nowak@dionglobal.com>,
 "users@subversion.apache.org" <users@subversion.apache.org>
References: <KL1PR04MB0981B81296CEF14D3C495515824F0@KL1PR04MB0981.apcprd04.prod.outlook.com>
From: Eric Johnson <eric@tibco.com>
Message-ID: <574495E2.4010605@tibco.com>
Date: Tue, 24 May 2016 10:56:50 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0)
 Gecko/20100101 Thunderbird/38.7.2
MIME-Version: 1.0
In-Reply-To: <KL1PR04MB0981B81296CEF14D3C495515824F0@KL1PR04MB0981.apcprd04.prod.outlook.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
archived-at: Tue, 24 May 2016 17:57:02 -0000

We scan our LDAP server, and generate group information from that, and 
then apply that to our version control servers.

Eric.

On 5/24/16 12:51 AM, Dariusz Nowak wrote:
>
> Hello,
>
>
> I'm new in subversion world and tried to research something yesterday 
> - without success, so decided to post here. My question is related to 
> authentication using LDAP.
>
>
> My scenario is that I will require 2 auth methods (passwd + ldap) all 
> of services (like Jenkins) will use passwd + authz and all of "humans" 
> will use their AD accounts.  I found really useful option in config 
> aliasses however got small problem applying to LDAP. And my question is:
>
>
> Can I create aliasses for LDAP groups ? I want in my LDAP AUTH file to 
> have something like:
>
> [aliases]
>
> mygroup = CN=PATH,DN=TO,DN=LDAP,DN=GROUP
>
>
> [/]
>
> @mygroup = r
>
>
> So I'm allowing for example every User object in my ldap tree to 
> access, but later limiting it like that ... this is how our current 
> setup works (a lot of hardcoded user/groups in auth/passwd files and 
> [/path/to/repo] = group1 = r, group2 = rw etc.
>
>
> Trying to mimic that with LDAP
>
>
> Regards
>
> D
>