views:

355

answers:

2

I have subversion currently set up on Windows to authenticate against our domain controller via Apache. Is it possible to allow authentication against both the domain controller and the subversion passwd file?

To accomplish this, would I have to have apache for windows authentication and also have svnserve run as a service and have that check against the passwd file?

+3  A: 

You can tell apache to provide basic authentication (using the passwd file) if the authentication against the domain controller fails.

Set the line

SSPIOfferBasic On

in your <Location> block in the apache config file.

Stefan
I already have SSPIOfferBasic on so that TortoiseSVN can authenticate against the Domain Controller (I read that without it, TortoiseSVN wont be able to authenticate). If I understand you correctly, I just have to specify the passwd file for the <Location> block, correct?
phsr
That did not seem to work for me....
phsr
+3  A: 

You want to apply mixed authentication. You can use http protocol via Apache for windows authentication and use svn protocol via svnserve to authenticate against passwd file.

you can use Stefan's solution but that does not prevent you from clearly separating different classes of users.

Rajesh
Chosen for separation of user classes
phsr
+1. Also just want to record here that the passwd method of authentication transmits the passwords as cleartext over the network - so if that bothers your sensibilities, look into using other more secure methods like ssh as well.
Critical Skill