Apache2 LDAP authorization for Subversion with OpenDS

There are several ways to enable user authentication for web based applications, like .htaccess files, plain tekst files, databases, LDAP, etc. They all have their pros and cons. In case a central, flexible solution is needed, either a database or LDAP solution can be used. I chose for an LDAP solution since it can be reused by many web and application servers and the applications that run on them while many LDAP solutions provide excellent tooling and easy configuration. Since Yenlo strongly focuses on GlassFish and other Sun tools, I chose OpenDS to authenticate against.The idea is to create a bunch of users and put them into one or more groups. Each group gets access to one specific Subversion repository and every user that needs access to a certain subversion repositoy needs to be in the corresponding group. This blog describes the basic steps I took to get Basic HTTP authentication for Subversion using Apache2 and OpenDS. Setting up the server The server is running on Debian Etch, for which most of the required software is available via the Debian package repository. The packages I installed are apache2 apache2-mpm-prefork libapache2-svn subversion sun-java6-bin sun-java6-jdk sun-java6-jre Apart form these packages I downloaded and installed the OpenDS 2.2 zip file from the OpenDS homepage. For this purpose I created a user and a group called “opends” and the directory /usr/local/opends which I gave both ownership...

Date: March, 15 2010
Url: http://www.java.net/blog/wvreeven/archive/2010/03/15/apache2-ldap-authorization-subversion-opends

Others News