<div>Hi, all,</div>
<div> </div>
<div>1) it is CentOs 5.1</div>
<div>2) i am sure that LDAP is working according to error and access logs (when i will type bad user it will fail, when i will type bad password it will inform me about password mismath)</div>
<div>3) yes it is in correct <Location> directory</div>
<div>I am sending whole config file :</div>
<div> </div>
<div>LoadModule dav_svn_module     modules/mod_dav_svn.so<br>LoadModule authz_svn_module   modules/mod_authz_svn.so<br>LoadModule authnz_ldap_module modules/mod_authnz_ldap.</div>
<div><br><IfModule mod_dav_svn.c> <br>                                                                                                                       <br> <br>                                                           <br>
 <br># - uncomment location section below and modify it according to your situation.                                        <br> <br>#    You will need to change at least the AuthLDAPURL parameter.                                                       <br>
     <br>#                                                                                                                      <br> <br># Documentation of the LDAP module used, and its parameters, is available at                                           <br>
       <br>#  <a href="http://httpd.apache.org/docs/2.2/mod/mod_authnz_ldap.html">http://httpd.apache.org/docs/2.2/mod/mod_authnz_ldap.html</a>                                                           <br> <br>#  <a href="http://httpd.apache.org/docs/2.2/mod/mod_ldap.html">http://httpd.apache.org/docs/2.2/mod/mod_ldap.html</a>                                                                  <br>
 <br>#                                                                                                                      <br>   <br><Location /repo>                                                                                                       <br>
 <br>#       # enable Web DAV HTTP access methods<br>        DAV svn                            <br>#        <br>#       # repository location                                                                             <br>
        SVNPath "/srv/polarion/svn/repo"                                                                               <br>          <br>#        <br>#       # write requests from WebDAV clients result in automatic commits<br>
        SVNAutoversioning on                                                                                           <br> <br>#                                                                                                                      <br>
  <br>        AuthName "Subversion repository"                                                                               <br> <br>#<br>#       # per-directory access control<br>        AuthzSVNAccessFile "/srv/polarion/svn/access"                                                                  <br>
          <br>#                                                                                                                      <br>  <br>        AuthType Basic                                                                                                 <br>
 <br>        AuthBasicProvider ldap                                                                                         <br> <br>#                              <br>#       # allow mod_authnz_ldap to decline group authentication so that Apache <br>
#       # will fall back to file authentication for checking group membership                                          <br>                                    <br>       AuthzLDAPAuthoritative   On<br>#                                                                                            <br>
#       AuthLDAPURL "<a href="ldap://yourExampleServer.com:389/ou=People,o=organization.org?uid">ldap://yourExampleServer.com:389/ou=People,o=organization.org?uid</a>"                                <br>                    <br>
#                                                                                                                      <br>  <br>#       Require valid-user<br>#                                                                                                      <br>
        AuthLDAPURL "<a href="ldap://server/ou=Users,o=Organization?uid">ldap://server/ou=Users,o=Organization?uid</a>"<br>        Require ldap-group "cn=tester2,ou=Groups,o=Organization"<br>        #Require ldap-dn cn=Hlacik David,ou=Users,o=Organization<br>
        AuthLDAPBindDN cn=svn,ou=Operators,o=Organization<br>        AuthLDAPBindPassword svn1</div>
<div></Location>                                                                                                            <br> <br>                                                                                                                       <br>
 <br></IfModule><br><br></div>
<div class="gmail_quote">2008/4/10 Jim Perrin <<a href="mailto:jperrin@gmail.com">jperrin@gmail.com</a>>:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<div class="Ih2E3d">On Thu, Apr 10, 2008 at 2:35 PM, David Hláčik <david@hlacik.eu> wrote:<br></div>
<div>
<div></div>
<div class="Wj3C7c">> Hi , i am facing a strange problem.<br>><br>> I have centos , i wan to access svn trought apache using mod auth ldap.<br>><br>> This is what i have configured<br>><br>>        AuthLDAPBindDN cn=svn,ou=Operators,o=Organization<br>
>         AuthLDAPBindPassword Pass1<br>>         AuthLDAPURL "ldap://ldap/ou=Users,o=Organization?uid"<br>>         AuthLDAPGroupAttribute member<br>>         AuthLDAPGroupAttributeIsDN on<br>>          Require group cn=tester2,ou=Groups,o=Organization<br>
><br>> What is strange?<br>><br>> According to doc it will accept only users which DN is in group<br>> cn=teste2,ou=Groups,o=Organization.<br>><br>> How come, for me it will accept every one user from LDAP?<br>
><br>> Thanks in advance!<br><br></div></div>Is this for centos 4 or centos5?<br><font color="#888888"><br><br>--<br>During times of universal deceit, telling the truth becomes a revolutionary act.<br>George Orwell<br>
</font><br>_______________________________________________<br>CentOS mailing list<br><a href="mailto:CentOS@centos.org">CentOS@centos.org</a><br><a href="http://lists.centos.org/mailman/listinfo/centos" target="_blank">http://lists.centos.org/mailman/listinfo/centos</a><br>
<br></blockquote></div><br>