ldap 无法与 svn 协同工作

ldap 无法与 svn 协同工作

尝试登录 svn repo 时,身份验证失败,出现密码不匹配错误。以下是 10-subversion.conf 的配置

尝试了所有方法,但似乎都没有用,包括更改端口。ldapsearch 对 ldap 用户工作正常并返回值。检查防火墙没有阻塞端口 389。也检查了 selinux 位。

尝试在配置中添加 tha authz 文件以允许 AD 中的特定用户访问 repos,但仍然不起作用:

AuthzSVN访问文件 /etc/httpd/conf/access.conf

access.conf 文件具有以下配置:

[repo:/] 用户1 = rw

10-subversion.conf 具有以下配置:

LoadModule dav_svn_module     modules/mod_dav_svn.so
LoadModule authz_svn_module   modules/mod_authz_svn.so
LoadModule dontdothat_module  modules/mod_dontdothat.so
LoadModule ldap_module        modules/mod_ldap.so
LoadModule authnz_ldap_module modules/mod_authnz_ldap.so

<Location /svn>
   DAV svn
   SVNParentPath /mnt/repositories
   AuthBasicProvider ldap
   AuthType basic
   AuthName "LDAP Authentication"
   AuthLDAPURL "ldap://192.0.0.1:389/DC=companyname,DC=com?sAMAccountName?sub?(objectClass=*)" 
   AuthLDAPBindDN "CN=svn ldap,CN=Users,DC=companyname,DC=com"
   AuthLDAPBindPassword "pwd"
   Require valid-user
</Location>

这是错误日志:

AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using fe80::250:56ff:febe:ad73%ens192. Set the 'ServerName' directive globally to suppress this message
[Sat Feb 17 11:23:55.968391 2024] [lbmethod_heartbeat:notice] [pid 1847930:tid 1847930] AH02282: No slotmem from mod_heartmonitor
[Sat Feb 17 11:23:55.971999 2024] [mpm_event:notice] [pid 1847930:tid 1847930] AH00489: Apache/2.4.57 (Rocky Linux) OpenSSL/3.0.7 SVN/1.14.1 configured -- resuming normal operations
[Sat Feb 17 11:23:55.972059 2024] [core:notice] [pid 1847930:tid 1847930] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Sat Feb 17 11:27:43.893361 2024] [auth_basic:error] [pid 1847939:tid 1848143] [client 10.0.98.1:55569] AH01617: user admin: authentication failure for "/svn/repo/": Password Mismatch

相关内容