[32031] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos for Subversion

daemon@ATHENA.MIT.EDU (Greg Hudson)
Mon Feb 8 14:06:57 2010

From: Greg Hudson <ghudson@mit.edu>
To: Edward Murrell <edward@murrell.co.nz>
In-Reply-To: <1265491221.20387.3.camel@boyle>
Date: Mon, 08 Feb 2010 13:15:21 -0500
Message-ID: <1265652921.13397.540.camel@ray>
Mime-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

On Sat, 2010-02-06 at 16:20 -0500, Edward Murrell wrote:
> Kerberos isn't specifically built into SVN, it's handled by the carrier
> protocol, which is usually SSH or HTTP. Depending on what you're using,
> you'll need to setup Kerberos in OpenSSH or your webserver.

Actually, as of Subversion 1.5, svnserve and ra_svn (the "svn://"
prefix, as opposed to "svn+ssh") can use Cyrus SASL.  So you can
conceivably use Kerberos authentication with any of the network
transports (http, svn, or svn+ssh).  If you want to use the built-in
ra_svn support, the following may be of use:

  http://svn.apache.org/repos/asf/subversion/trunk/notes/sasl.txt

I've never personally set it up that way.  You may have better luck
getting support on the Subversion users list if you run into problems.


________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post