Setting up apache httpd and subversion on a redhat host to integrate with Windows AD Domain authentication

The following setup worked for me:

1 using kerberos for the auth module:

I tried to use mod_ntlm but it proved too hard to get it to work on Apache 2.2 on redhat.

I have the following in /etc/krb5.conf:

clockskew = 300
default_realm = AAA.BBB.XXX.COM

kdc =
default_domain = AAA.BBB.XXX.COM
kpasswd_server =


With that I am to run kinit and get kerberos ticket from the redhat host.

And my /etc/httpd/conf/httpd.conf has:

DAV svn
SVNPath "/path/to/svn_repo"

AuthType Kerberos
AuthName Kerberos
KrbMethodNegotiate Off
KrbMethodK5Passwd On
KrbServiceName Any
KrbSaveCredentials on
KrbLocalUserMapping on
# The last bit I had to fix to get this working:
KrbVerifyKDC Off

AuthzSVNAccessFile /path/to/svn_access_file
require valid-user

Using this setup I can get users to authenticate against the corporate active directory domain controller to access Subversion.

My apache httpd version: 2.2.15
My subversion svn version: 1.6.11


Leave a comment

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s