Is it possible to change content of a commit by pre-commit hook?

[thiemo.kellner]

Hi all

We export PowerCenter workflows as XML to commit those to subversion. We would 
like to make sure that the description attribute of the tags contain subversion 
information like Rev or Header. Is it possible to change the content i.e. the 
value of the xml description attribute by commit hook? I had a look at red bean 
book and search the net for hints. I only found 'svnlook cat' to echo the 
content of the file but I did not find a means to alter the content. Is it 
possible to achieve or do I need to make a check on the content and fail the 
commit if the required bits of information in the content is not present?

Kind regards

Thiemo

SVN and Active Directory

[Gronde, Christopher (Contractor)]

Has anyone in here successfully integrated SVN with Active Directory for user 
authentication?  We are currently using FreeIPA and user account management is 
the bane of my existence.  If anyone has or knows of any documentation for 
integrating Active Directory with SVN (preferably 1.9 since we are going to 
upgrade to that version) that would be much appreciated.

V/r
Chris Gronde (CTR)
Navstar, INC.
Linux Systems Administrator
Network Monitoring Engineer
Financial Crimes Enforcement Network (FinCEN)
Technology Solutions and Services Division (TSSD)
Tel: 703-905-3578
Cell: 571-318-7743
Office: 2041K

Re: SVN and Active Directory

[jblist]

> On Apr 19, 2016, at 12:53 PM, Gronde, Christopher (Contractor) 
>  wrote:
> 
> Has anyone in here successfully integrated SVN with Active Directory for user 
> authentication?  We are currently using FreeIPA and user account management 
> is the bane of my existence.  If anyone has or knows of any documentation for 
> integrating Active Directory with SVN (preferably 1.9 since we are going to 
> upgrade to that version) that would be much appreciated.
>  
> V/r
> Chris Gronde (CTR)
> Navstar, INC.
> Linux Systems Administrator
> Network Monitoring Engineer
> Financial Crimes Enforcement Network (FinCEN)
> Technology Solutions and Services Division (TSSD)
> Tel: 703-905-3578
> Cell: 571-318-7743
> Office: 2041K


I have, just recently in fact. The trick is to use SASL with LDAP. I only use 
authentication at this point and don't use AD groups for authorization.

I'm using a RHEL7 as my svn server which bundles SVN 1.7. I can't imagine the 
configuration of the server would be drastically different from 1.7 to 1.9.

So far the only burr in the saddle has been making sure the clients support 
SASL/PLAIN -- most do, but Eclipse with Subclipse was a failure.

As long as you're fine with passing credentials in cleartext, then this will 
work for you. If you need SSL encryption, then you will probably need to add 
Apache. Trying to get the RedHat-supplied svn and Apache components to work 
together was a non-starter, and trying to build everything from source on RHEL 
didn't work either.

RE: SVN and Active Directory

[Gronde, Christopher (Contractor)]

Unfortunately I fear that SSL is going to be a requirement for us.  The client 
our users have been using is TortoiseSVN.  1.9 isn't supplied by Red Hat so 
maybe that is easier to get to play well with apache than 1.7 was for you?

From: jbl...@icloud.com [mailto:jbl...@icloud.com]
Sent: Tuesday, April 19, 2016 4:12 PM
To: Gronde, Christopher (Contractor) 
Cc: users@subversion.apache.org
Subject: Re: SVN and Active Directory


On Apr 19, 2016, at 12:53 PM, Gronde, Christopher (Contractor) 
mailto:christopher.gro...@fincen.gov>> wrote:

Has anyone in here successfully integrated SVN with Active Directory for user 
authentication?  We are currently using FreeIPA and user account management is 
the bane of my existence.  If anyone has or knows of any documentation for 
integrating Active Directory with SVN (preferably 1.9 since we are going to 
upgrade to that version) that would be much appreciated.



I have, just recently in fact. The trick is to use SASL with LDAP. I only use 
authentication at this point and don't use AD groups for authorization.

I'm using a RHEL7 as my svn server which bundles SVN 1.7. I can't imagine the 
configuration of the server would be drastically different from 1.7 to 1.9.

So far the only burr in the saddle has been making sure the clients support 
SASL/PLAIN -- most do, but Eclipse with Subclipse was a failure.

As long as you're fine with passing credentials in cleartext, then this will 
work for you. If you need SSL encryption, then you will probably need to add 
Apache. Trying to get the RedHat-supplied svn and Apache components to work 
together was a non-starter, and trying to build everything from source on RHEL 
didn't work either.

Re: SVN and Active Directory

[Eric Johnson]

Absolutely, but by way of using Apache mod_auth_ldap, and AD's LDAP API.

Eric

On 4/19/16 12:53 PM, Gronde, Christopher (Contractor) wrote:


Has anyone in here successfully integrated SVN with Active Directory 
for user authentication?  We are currently using FreeIPA and user 
account management is the bane of my existence.  If anyone has or 
knows of any documentation for integrating Active Directory with SVN 
(preferably 1.9 since we are going to upgrade to that version) that 
would be much appreciated.


V/r

Chris Gronde (CTR)

Navstar, INC.

Linux Systems Administrator

Network Monitoring Engineer

Financial Crimes Enforcement Network (FinCEN)

Technology Solutions and Services Division (TSSD)

Tel: 703-905-3578

Cell: 571-318-7743

Office: 2041K

Re: SVN and Active Directory

[jblist]

>  
> From: jbl...@icloud.com [mailto:jbl...@icloud.com] 
> Sent: Tuesday, April 19, 2016 4:12 PM
> To: Gronde, Christopher (Contractor) 
> Cc: users@subversion.apache.org
> Subject: Re: SVN and Active Directory
>  
>  
> On Apr 19, 2016, at 12:53 PM, Gronde, Christopher (Contractor) 
> mailto:christopher.gro...@fincen.gov>> wrote:
>  
> Has anyone in here successfully integrated SVN with Active Directory for user 
> authentication?  We are currently using FreeIPA and user account management 
> is the bane of my existence.  If anyone has or knows of any documentation for 
> integrating Active Directory with SVN (preferably 1.9 since we are going to 
> upgrade to that version) that would be much appreciated.
>  
>  
>  
> I have, just recently in fact. The trick is to use SASL with LDAP. I only use 
> authentication at this point and don't use AD groups for authorization.
>  
> I'm using a RHEL7 as my svn server which bundles SVN 1.7. I can't imagine the 
> configuration of the server would be drastically different from 1.7 to 1.9.
>  
> So far the only burr in the saddle has been making sure the clients support 
> SASL/PLAIN -- most do, but Eclipse with Subclipse was a failure.
>  
> As long as you're fine with passing credentials in cleartext, then this will 
> work for you. If you need SSL encryption, then you will probably need to add 
> Apache. Trying to get the RedHat-supplied svn and Apache components to work 
> together was a non-starter, and trying to build everything from source on 
> RHEL didn't work either.

> On Apr 19, 2016, at 1:16 PM, Gronde, Christopher (Contractor) 
>  wrote:
> 
> Unfortunately I fear that SSL is going to be a requirement for us.  The 
> client our users have been using is TortoiseSVN.  1.9 isn’t supplied by Red 
> Hat so maybe that is easier to get to play well with apache than 1.7 was for 
> you?



[please bottom post your responses]

We also use TortoiseSVN 1.9 and it supports SASL. It was only subclipse that 
caused grief.

I would suggest looking to a packager like wanDisco for your svn 1.9 server. 
They could probably help getting Subversion+Apache working without having to 
build from source. Also, since Apache 2.4 natively supports AD authentication, 
you might get everything you need without having to rely on RedHat.

Re: Is it possible to change content of a commit by pre-commit hook?

[Joseph Bruni]

> On Apr 19, 2016, at 12:44 AM, thiemo.kell...@post.ch wrote:
> 
> Hi all
> 
> We export PowerCenter workflows as XML to commit those to subversion. We 
> would like to make sure that the description attribute of the tags contain 
> subversion information like Rev or Header. Is it possible to change the 
> content i.e. the value of the xml description attribute by commit hook? I had 
> a look at red bean book and search the net for hints. I only found 'svnlook 
> cat' to echo the content of the file but I did not find a means to alter the 
> content. Is it possible to achieve or do I need to make a check on the 
> content and fail the commit if the required bits of information in the 
> content is not present?
> 
> Kind regards
> 
> Thiemo


Have you tried using keywords?

http://svnbook.red-bean.com/en/1.8/svn.advanced.props.special.keywords.html

You might be able to use a pre-commit hook to verify that the keywords are 
present and that the svn:keywords property is set on the file -- not the modify 
the content but to reject the commit if they are missing.

Re: Is it possible to change content of a commit by pre-commit hook?

[Branko Čibej]

On 19.04.2016 09:44, thiemo.kell...@post.ch wrote:
> Hi all
>
> We export PowerCenter workflows as XML to commit those to subversion. We 
> would like to make sure that the description attribute of the tags contain 
> subversion information like Rev or Header. Is it possible to change the 
> content i.e. the value of the xml description attribute by commit hook?

It is theoretically possible but YOU MUST NOT DO THAT because you'll
break the working copy that the commit was made from.

-- Brane

RE: SVN and Active Directory

[Tony Butt]

We use saslauthd with a Kerberos backend to our AD servers, and it works very 
well. That assumes you are running a linux based Os, of course.
Tony Butt
CEA Technologies

From: jbl...@icloud.com [mailto:jbl...@icloud.com]
Sent: Wednesday, 20 April 2016 6:22 AM
To: Gronde, Christopher (Contractor)
Cc: users@subversion.apache.org
Subject: Re: SVN and Active Directory



From: jbl...@icloud.com [mailto:jbl...@icloud.com]
Sent: Tuesday, April 19, 2016 4:12 PM
To: Gronde, Christopher (Contractor) 
mailto:christopher.gro...@fincen.gov>>
Cc: users@subversion.apache.org
Subject: Re: SVN and Active Directory


On Apr 19, 2016, at 12:53 PM, Gronde, Christopher (Contractor) 
mailto:christopher.gro...@fincen.gov>> wrote:

Has anyone in here successfully integrated SVN with Active Directory for user 
authentication?  We are currently using FreeIPA and user account management is 
the bane of my existence.  If anyone has or knows of any documentation for 
integrating Active Directory with SVN (preferably 1.9 since we are going to 
upgrade to that version) that would be much appreciated.



I have, just recently in fact. The trick is to use SASL with LDAP. I only use 
authentication at this point and don't use AD groups for authorization.

I'm using a RHEL7 as my svn server which bundles SVN 1.7. I can't imagine the 
configuration of the server would be drastically different from 1.7 to 1.9.

So far the only burr in the saddle has been making sure the clients support 
SASL/PLAIN -- most do, but Eclipse with Subclipse was a failure.

As long as you're fine with passing credentials in cleartext, then this will 
work for you. If you need SSL encryption, then you will probably need to add 
Apache. Trying to get the RedHat-supplied svn and Apache components to work 
together was a non-starter, and trying to build everything from source on RHEL 
didn't work either.

On Apr 19, 2016, at 1:16 PM, Gronde, Christopher (Contractor) 
mailto:christopher.gro...@fincen.gov>> wrote:

Unfortunately I fear that SSL is going to be a requirement for us.  The client 
our users have been using is TortoiseSVN.  1.9 isn’t supplied by Red Hat so 
maybe that is easier to get to play well with apache than 1.7 was for you?


[please bottom post your responses]

We also use TortoiseSVN 1.9 and it supports SASL. It was only subclipse that 
caused grief.

I would suggest looking to a packager like wanDisco for your svn 1.9 server. 
They could probably help getting Subversion+Apache working without having to 
build from source. Also, since Apache 2.4 natively supports AD authentication, 
you might get everything you need without having to rely on RedHat.

RE: Is it possible to change content of a commit by pre-commit hook?

[thiemo.kellner]

Thanks for your thoughts. I am already aware of the possibility of check and 
reject though checking the presence of the appropriate property evaded me so 
far.

I quite feel it might contradict the purpose of a versioning system if that 
system would allow changes within it and not just store in certain way what was 
handed over to it.

-Original Message-
From: Joseph Bruni [mailto:jbr...@icloud.com] 
Sent: Dienstag, 19. April 2016 22:27
To: Kellner Thiemo, IT124 extern
Cc: users@subversion.apache.org
Subject: Re: Is it possible to change content of a commit by pre-commit hook?


> On Apr 19, 2016, at 12:44 AM, thiemo.kell...@post.ch wrote:
> 
> Hi all
> 
> We export PowerCenter workflows as XML to commit those to subversion. We 
> would like to make sure that the description attribute of the tags contain 
> subversion information like Rev or Header. Is it possible to change the 
> content i.e. the value of the xml description attribute by commit hook? I had 
> a look at red bean book and search the net for hints. I only found 'svnlook 
> cat' to echo the content of the file but I did not find a means to alter the 
> content. Is it possible to achieve or do I need to make a check on the 
> content and fail the commit if the required bits of information in the 
> content is not present?
> 
> Kind regards
> 
> Thiemo


Have you tried using keywords?

http://svnbook.red-bean.com/en/1.8/svn.advanced.props.special.keywords.html

You might be able to use a pre-commit hook to verify that the keywords are 
present and that the svn:keywords property is set on the file -- not the modify 
the content but to reject the commit if they are missing.