LoadModule dav_svn_module     modules/mod_dav_svn.so
LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
LoadModule ldap_module modules/mod_ldap.so

# Only needed if you decide to do "per-directory" access control.
LoadModule authz_svn_module       modules/mod_authz_svn.so

# Needed to provide PAM-based authentication for Subversion.
LoadModule authnz_external_module modules/mod_authnz_external.so
LoadModule authz_unixgroup_module modules/mod_authz_unixgroup.so
DefineExternalAuth pwauth pipe /usr/sbin/pwauth

<Location /repos>
    DAV svn
    SVNPath /var/www/svn/repos
    AuthName "SVN Repos"
    AuthType Basic
    AuthBasicProvider ldap

    #try commenting below directives alternately
    AuthExternal pwauth
    #AuthzUnixGroup on

    # short circuit path-based authorization for Subversion
    #SVNPathAuthz short_circuit

    AuthLDAPURL ldaps://ldap_l.cisco.com:10648/ou=users,dc=sprint,dc=com?hasSubordinates,objectClass?one?(objectClass=*)
    AuthLDAPBindDN uid=admin,ou=system
    AuthLDAPBindPassword secret

    AuthLDAPGroupAttributeIsDN off
    AuthLDAPGroupAttribute cn
            Require valid-user
            <Limit HEAD GET OPTIONS PROPFIND REPORT>
                #<RequireAny> 
                    # Read access 
                    Require ldap-group cn=User,ou=groups,dc=sprint,dc=com
                #</RequireAny> 
            </Limit>
            <LimitExcept HEAD GET OPTIONS PROPFIND REPORT>
                #<RequireAny> 
                    # Write access 
                    Require ldap-group cn=Admin,ou=groups,dc=sprint,dc=com
                #</RequireAny> 
            </LimitExcept>
        

</Location>
<Location /repos-proxy-sync>
    DAV svn
    SVNPath /var/www/svn/repos
    Order deny,allow
    Deny from all
    Allow from ::1 127.0.0.1 pcrfclient01 installer arbiter01
</Location>    