[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [SAGE] Subversion, passwords and ACLs



On 1/19/07, Neil Watson <sage@watson-wilson.ca> wrote:
> Is there a way to control directory access inside a repository while
> still using UNIX shell accounts for logins?

The short answer is "no". The long answer involves Apache over SSL and
HTTP Basic Authentication. Use the <Location /foo/bar> directives to
protect the directories you are interested in, and then set up Apache
to authenticate in one of two ways:

    the bad way:
        Hook HTTP Basic Authentication to your UNIX password file.

    the good way:
        Set up both PAM and HTTP Basic Authentication to defer to LDAP or
        some similar service. You can set up LDAP to talk to a pipe instead
        of a network socket, essentially network proofing your authentication
        mechanism.

-- 
_jsn