Rocket Surgery

As a contrast to my previous post regarding securing Subversion, I thought I would go through how to secure a Hudson installation using Active Directory for authentication and authorization.

Steps:

Read the rest of this entry »

Requirements:

1. Secure a Subversion 1.4.6 installation running on a Windows 2003 server
2. Authentication must be against existing Active Directory accounts
3. The Active Directory server does not allow anonymous binding
4. Users in group foo should be able to get to the source code
5. Users not in group foo should get no access at all
6. Nobody should be able to see anyone else’s password.

Solution:

I finally got it working by using the suggested method of using Apache HTTPD server as a front-end to Subversion, and rather than applying security to Subversion, securing Apache to access Active Directory as an LDAP server.

Steps:
Read the rest of this entry »

I have designed two new bumper stickers in a shameless attempt to make a buck.

These can actually be ordered at http://www.cafepress.com/mattharrah.  Such a deal!!