Host authentication on Windows server

I have subversion installed on a Windows Server 2012 that users use to write programs and commit changes to subversion. The users are setup as local users on that server, and we want to configure subversion to use the Windows server to authenticate the users with the local users. Can this be done?   I have searched and found doc that shows how to setup basic, digest, and ldap authentication, but I can't find how to setup host authentication.

Last updated 1 year ago

How are your users accessing the repository? Via which type of URL? Please provide a redacted example.

The users will be logged into the windows server, they will use TortoiseSVN, and will be using http://localhost/svn/prj1 to connect.

If you're using an Apache server on your windows box then use Active Directory as an LDAP Authority for AuthN. Make sure to setup SSL and port-forward 80 to 443, etc.

I managed to get host authentication for subversion working using the steps below.  I used information from two sites on the web:

 
1. https://sourceforge.net/p/mod-auth-sspi/discussion/550583/thread/1d7f5dba/ 
2. https://blog.pengoworks.com/index.cfm/2007/11/1/Configuring-Windows-Authentication-with-Apache-22x-and-Subversion 

Steps  1: Download the module from here https://www.apachehaus.net/modules/mod_authnz_sspi/ (x86 for 32 bit and x64 for 64 bit apache)   2: Copy the mod_authnz_sspi.so from Apache24>>modules folder and place it in the modules folder of your Apache folder on your webserver   3: Under the httpd.conf file (Config file for your apache) place this line of code. Try to load this as the last module  LoadModule authnz_sspi_module modules/mod_authnz_sspi.so   4: Make sure that the following modules are uncommented  LoadModule authn_core_module modules/mod_authn_core.so LoadModule authz_core_module modules/mod_authz_core.so   PS:- both the above modules are required for this to work.  
 
5. Added the below lines to subversion.conf

  KeepAlive On  
<Location /svn>   DAV svn   SVNParentPath "C:\Repo"    AuthName "SSPI Subversion Authentication"   AuthType SSPI   SSPIAuth On   SSPIAuthoritative On   Require valid-user    SSPIOfferBasic On        # let non-IE clients authenticate   SSPIOmitDomain On   SVNAutoversioning on  </Location>
   # Enable Subversion logging CustomLog logs/subversion.log combined 

 

Excellent! Thank you for posting your solution! Cheers.