No, I want the RHS to be the full DN. Presently it has to be the email address or nickname or whatever else the user actually typed into the login dialog.
EJP -----Original Message----- From: Daniel Shahaf [mailto:d...@daniel.shahaf.name] Sent: Saturday, 15 September 2012 8:45 AM To: Esmond Pitt Cc: users@subversion.apache.org Subject: Re: AuthzSVNAccessFile and [alias] To clarify, you want the left-hand side of an alias line to be the full DN, right? How is this going to work? Does our ini parser allow the LHS to contain embedded '=' sign? https://svn.apache.org/repos/asf/subversion/trunk/subversion/libsvn_subr/con fig_file.c http://docs.python.org/library/configparser Esmond Pitt wrote on Wed, Sep 12, 2012 at 16:08:00 +1000: > The value of an alias in the AuthzSVNAccess file seems constrained to > be whatever login name the user used. > > However I am using LDAP authentication, and it is preferable for me > for it to be the full DN of the user rather than whatever he supplied > as the login name. > > I have 'AuthLDAPRemoteUserIsDN on', which promotes this behaviour for > the REMOTE_USER variable within Apache. > > Is there a way of propagating that behaviour to the AuthzSVNAccess file? > > Thanks in advance > > EJP