Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We have a webserver which offers svn, websvn and trac using ApacheAuth, which we are in the process of moving to a new domain. I am looking for a way to have a translation Logonname -> Username.

This is why:

  • For external reasons, the samAccountName is a 6-char string which is randomly assigned at account creation. This cannot be changed.
  • In a collaboration context, it is preferrable to see a cleartext name.
  • We have two persons with the same name, so the attribute displayName is problematic.
  • Mail-Address is also problematic, because of the @ sign.
  • We chose to use MailNickname, which proved to be unpopular with users, especially people with longer names. Also, for technical reasons, MailNickname is a bad choice, because it can change when users take a new mail alias.

Question:

In what way can I have people login using samAccountName, but display any other AD or LDAP attribute which is different from samAccountName, within svn, websvn, trac?

This is the Auth part of sites-available/svn:

    AuthType Basic
    AuthName "Username: your logon name"
    Require valid-user

    AuthLDAPBindDn CN=$account
    AuthLDAPBindPassword $password

    AuthBasicProvider ldap
    AuthzLDAPAuthoritative on
    AuthLDAPURL ldap://$server:389/$path?mailNickname?sub
    AuthLDAPGroupAttribute memberOf
    AuthLDAPGroupAttribute member
    AuthLDAPGroupAttributeIsDN on
    Require ldap-group CN=$groupname
    AuthzSVNAccessFile /srv/svn/auth/authz
share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.