Yes you can. I have a very similar environment, Fedora Core 4 + Apache
2.0.54 + subversion 1.2.3 and authentication is managed through
kerberos 5 and LDAP such way some trac projects authenticate user from
LDAP and others autehnticate users from kerberos.
All that you have to do, is configure trac authentication in apache
using kerberos, here it is my example configuration.
# Common trac configuration
<Location "/trac">
SetHandler mod_python
PythonHandler trac.web.modpython_frontend
PythonOption TracEnvParentDir /var/lib/trac
PythonOption TracUriRoot /trac
PythonOption TracLocale es_ES # I'm spanish ;)
</Location>
# LDAP auth sistem for project 1
<Location "/trac/project1/login">
AuthType Kerberos
KrbAuthRealms HGCR.SESCAM.JCLM.ES
KrbServiceName HTTP
Krb5Keytab /etc/httpd/tracker.keytab
KrbMethodNegotiate on
KrbMethodK5Passwd off
require valid-user
</Location>
# KRB auth sistem for project 2
<Location "/trac/project2/login">
AuthType basic
AuthName "Auth - Trac - Project2"
AuthLDAPURL ldap://serverldap.myorg.es:389/ou=users,dc=myorg,dc=es?uid?one
Require valid-user
</Location>
The other thing you have to do, is to set up kerberos environment
using krb-libs and /etc/krb5.conf, but you said you had kerberos
authentication working with svn so I suppouse you have it ok.
Regards.
2006/8/17, White, Joseph <[EMAIL PROTECTED]>:
Hi All,
I have a RHEL 4 / Apache 2.0.52 / subversion-1.2.1-0.1.2 w/Kerberos
auth, setup and working fine.
Does anyone have a link to some examples of what TRAC configurations are
required in the httpd.conf of a RHEL 4 server ?
We have Kerberos authentication over ssl working on our Apache 2.0.52 /
subversion-1.2.1-0.1.2 server, can I use this setup with TRAC?
Thanks
Joe
_______________________________________________
Trac mailing list
[email protected]
http://lists.edgewall.com/mailman/listinfo/trac
--
Miguel A. Laguna
"La vida es aquello que te sucede, mientras te empeñas en cumplir tus
espectativas"
_______________________________________________
Trac mailing list
[email protected]
http://lists.edgewall.com/mailman/listinfo/trac
