RE: Re: [viewvc-users] viewvc, and using svn+ssh

Good to know in theory. Now I just need to sort out the implementation details.  Since we currently allow svn client and viewvc via https, I have to decouple that configuration.  For ease of use, viewvc and svn have been pointing to the same httpd based credentials.

User names will be consistent with an LDAP authority.

For those not familiar with the wandisco product, wandisco access control (also interacting with our LDAP authority) can be customized to write both apache and svnserve authz rule sets.  It will write the apache or svnserve format information needed. Wandisco then steps out of the way, actual svn or viewvc access control is via standard file authz/access file sets.

Ideally I would like viewvc to authenticate user/password obtained from our LDAP authority at the https level.
That would allow anyone with a valid user account in ldap to get that far.

Next, have viewvc parse, or follow the svnserve access rules. I assume that would be creating the right configuration steps inside /etc/viewvc/viewvc.conf. 
A user password may be perfectly valid, and yet they would be completely blocked if they did not meet the svnserve group rules sets in authz-db defined file.

If anyone has any pointers to documentation/tutorials to configure viewvc in this manner, that would be greatly appreciated.

------------------------------------------------------
http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=3150427

To unsubscribe from this discussion, e-mail: [[email protected]].