[32042] in Kerberos
Re: Kerberos for Subversion
daemon@ATHENA.MIT.EDU (Greg Troxel)
Wed Feb 10 12:41:59 2010
From: Greg Troxel <gdt@ir.bbn.com>
To: =?utf-8?Q?Bj=C3=B8rn?= Tore Sund <bjorn.sund@it.uib.no>
Date: Wed, 10 Feb 2010 09:02:35 -0500
In-Reply-To: <4B6DEF7A.2000707@it.uib.no> (=?utf-8?Q?=22Bj=C3=B8rn?= Tore
Sund"'s message of "Sat, 06 Feb 2010 23:38:50 +0100")
Message-ID: <rmi8wb1kx38.fsf@fnord.ir.bbn.com>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: multipart/mixed; boundary="===============1667363511=="
Errors-To: kerberos-bounces@mit.edu
--===============1667363511==
Content-Type: multipart/signed; boundary="=-=-=";
micalg=pgp-sha1; protocol="application/pgp-signature"
--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Bj=C3=B8rn Tore Sund <bjorn.sund@it.uib.no> writes:
> On 2/4/10 10:27 PM, Girish Mandhania wrote:
>> Hello,
>> I am working for a university and have Kerberos installed on our server.I
>> wish to use Kerberos authentication of Subversion(change management
>> application) on Linux.
>> Could you please help me with the clear list of steps to be followed, as=
I
>> am not able to find relevant information on the web.
>> Let me know if any more details are required..
>
> Assuming you've got subversion running behind Apache you use=20
> mod_auth_kerb in exactly the same way you would any other Apache=20
> location where you want authentication.
>
> http://modauthkerb.sourceforge.net/
That makes the server take passwords and validate them against the
kerberos database, or else requires for browser-side access the
Negotiate mechanism. It seems bad practice to send ones kerberos
password to the server (or perhaps worse, to have svn store it), so
obviously the only reasonable thing to do is use Negotitate.
neon seems to have a gssapi option - does that work from svn with
modauthkerb?
--=-=-=
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (NetBSD)
iEYEARECAAYFAktyvHwACgkQ+vesoDJhHiVLKwCeJVLmkKQc0ePTF3V5/eFohtkz
uCoAoLC/lQHWsLRo32/0aCCjhI/xsOqe
=oiRh
-----END PGP SIGNATURE-----
--=-=-=--
--===============1667363511==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============1667363511==--
