On 08/15/2014 12:07 PM, Michael Ströder wrote:
On Fri, 15 Aug 2014 10:11:19 +0200 Dmitri Pal <dpal(a)redhat.com>
wrote
> On 08/15/2014 01:18 AM, Jacob Weber wrote:
>> In particular, this machine runs Subversion over Apache, and authenticates
>> against the system users (using SSSD). Unfortunately SVN over Apache makes
a
>> ton of separate requests.
> Is this just authentication?
> Because if it is you might consider things like SSO.
> Kerberos for example.
> While mod_auth_kerb would do the renegotiation on every request which
> most likely be a bit slow the new module mod_auth_gssapi has session
> support that sets cookies after the initial negotiation. That should be
> much faster and I expect it to need your requirement.
> Have you considered this as an alternative?
> If you need more details of how that all works let me know.
IMHO this very much depends on what the SVN clients (which one?) are capable to
use.
Ciao, Michael.
You would need the client to support GSSAPI. All browsers do.
Some client libraries can be made work.
Quick Google search on "SVN client Kerberos GSSAPI" rendered results
that indicate that it is possible.
Here is the example:
https://bugs.launchpad.net/ubuntu/+source/subversion/+bug/1303167/comments/3
--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.