I have seen that this feature already exists in the svn client and can be controlled via
the following directives in subversion configuration:

ssl-client-cert-file
ssl-client-cert-password

The access to the repository should be authenticated in a host-based way.
This would also offer the oppurtinity to evaluate key attributes on server side for url rewrite and verify the the origin of the http-request. We need a password option for avoiding the password request when http-auth. I am not sure for now if the svn-client does seperate password requests (ssl/http-auth). For our scenario if the password is stored http-auth should use this password. We need http-auth to get the username of the committer.

Userbased authorisation makes no sense in our environment as every fsvs-user is also admin and therefore could fake the username / spy passwords. Using ssh for host-based authentication does not offer the flexibility of apache2 which we need in this scenario.

Best Regards,
Gunnar Thielebein

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to