Right, read the doc over 20 times already :) It could be my environment or the client cert I'm using. I did try different environment configurations (i.e. older openssl versions). I got tired of looking through apache's c code and openssl code, to see if I could pinpoint where the problem is. In any case, it wasn't getting set while I know UID is there because I see it when I log the full DN.
So that's why I decided to go mod_perl route, which I like b/c I have more control and flexibility, plus the best part -- I'm learning mod_perl in the meantime :) -Dennis -----Original Message----- From: Torsten Foertsch [mailto:[EMAIL PROTECTED] Sent: Sunday, March 26, 2006 2:26 PM To: modperl@perl.apache.org Subject: Re: Controlling subversion access On Sunday 26 March 2006 17:13, Dennis Sinelnikov wrote: > Here is the code in my httpd-ssl.conf that works: > <Location /svn> > DAV svn > SVNPath /home/svnroot > SSLUserName SSL_CLIENT_S_DN_CN > AuthzSVNAccessFile /usr/local/apache2/conf/svnauthorization > </Location> > > However, I need the UID, and SSL_CLIENT_S_DN_UID is not getting set, > that's why I decided to go the <Perl> route. > I need to mimick exactly the samething as above but only parse the > SSL_CLIENT_S_DN to get the UID and set SSLUserName. And SSLUserName SSL_CLIENT_S_DN_UID does not work? According to the docs that should work. Torsten