Host authentication on Windows server

I have subversion installed on a Windows Server 2012 that users use to write programs and commit changes to subversion. The users are setup as local users on that server, and we want to configure subversion to use the Windows server to authenticate the users with the local users. Can this be done? I have searched and found doc that shows how to setup basic, digest, and ldap authentication, but I can't find how to setup host authentication.

Last updated 1 year ago

How are your users accessing the repository? Via which type of URL? Please provide a redacted example.

The users will be logged into the windows server, they will use TortoiseSVN, and will be using [url]http://localhost/svn/prj1[/url] to connect.

If you're using an Apache server on your windows box then use Active Directory as an LDAP Authority for AuthN. Make sure to setup SSL and port-forward 80 to 443, etc.

I managed to get host authentication for subversion working using the steps below. I used information from two sites on the web: [LIST=1] [*][URL]https://sourceforge.net/p/mod-auth-sspi/discussion/550583/thread/1d7f5dba/[/URL] [*][url]https://blog.pengoworks.com/index.cfm/2007/11/1/Configuring-Windows-Authentication-with-Apache-22x-and-Subversion[/url] [/LIST][B]Steps[/B] 1: Download the module from here [URL]https://www.apachehaus.net/modules/mod_authnz_sspi/[/URL] (x86 for 32 bit and x64 for 64 bit apache) 2: Copy the mod_authnz_sspi.so from Apache24>>modules folder and place it in the modules folder of your Apache folder on your webserver 3: Under the httpd.conf file (Config file for your apache) place this line of code. Try to load this as the last module LoadModule authnz_sspi_module modules/mod_authnz_sspi.so 4: Make sure that the following modules are uncommented LoadModule authn_core_module modules/mod_authn_core.so LoadModule authz_core_module modules/mod_authz_core.so PS:- both the above modules are required for this to work. [FONT="Calibri"] [/FONT] 5. Added the below lines to subversion.conf [INDENT] KeepAlive On DAV svn SVNParentPath "C:\Repo" AuthName "SSPI Subversion Authentication" AuthType SSPI SSPIAuth On SSPIAuthoritative On Require valid-user SSPIOfferBasic On # let non-IE clients authenticate SSPIOmitDomain On SVNAutoversioning on # Enable Subversion logging CustomLog logs/subversion.log combined [/INDENT]

Excellent! Thank you for posting your solution! Cheers.