integrasi ebox-usersandgroups dgn Apache-Subversion

Subversion adalah sebuah source control system yang dapat menyimpan file apapun. Prinsip kerjanya lebih mirip CVS daripada SourceSafe, dan memang merupakan hasil pengembangan orang-orang yg ingin memperbaiki CVS. Dalam Subversion, kita dapat menyimpan file source code ataupun binary (file PHP atau file Excel, misalnya), memberi akses terpusat ke banyak orang ke file tersebut, memberi access control (siapa yang boleh menulis, siapa yang hanya dapat membaca), mencatat tiap versi dari file (sehingga ada history/log revisi tiap file, diubah oleh siapa, kapan, dan apa pesan perubahannya).
Subversion memiliki fitur integrasi dengan Apache Web Server, sehingga kita dapat memanfaatkan salah satu dari metoda authentication yang tersedia bagi Apache, dan memungkinkan akses ke repository menggunakan protokol HTTP. Ya benar, bisa diakses dengan web browser, tapi hanya akses dasar saja yang dapat dilakukan. Ia juga mendukung protokol WebDAV - yang memungkinkan kita mengakses menggunakan macam-macam software seperti Windows Explorer, Microsoft Excel, Frontpage. Untuk mendapatkan fitur yang lengkap, Subversion repository dapat diakses menggunakan SVN Client seperti TortoiseSVN atau plugin subclipse.
Tadinya, saya gunakan metoda authentication dan access control yang berbasis file teks. Satu file merupakan output htpasswd, yang berisi username dan md5 hash, file yang lain ialah ACL untuk repository tersebut. Meskipun praktis, tetapi proses penambahan user tidak dapat dilakukan oleh orang yang awam.
OK, misalkan kita tidak butuh ACL per direktori, cukuplah ACL per repository. Ada opsi lain yaitu menggunakan autentikasi dan otorisasi LDAP, di mana Apache akan menghubungi server LDAP yang kita tunjuk untuk melakukan autentikasi dan otorisasi. Dan jika kita gunakan OpenLDAP di server yang sama, kita dapat menggunakan ebox - sebuah web-based GUI untuk melakukan administrasi server, termasuk memanage user & group di OpenLDAP server.
Saya menginstall package ebox & ebox-usersandgroups di sebuah VMWare Image Ubuntu Hardy. Btw, package ebox yang digunakan diambil dari situs di luar Ubuntu Package Repository - tambahkan ini di /etc/apt/sources.list anda:
deb http://ppa.launchpad.net/juruen/ubuntu hardy main
Persiapkan sebuah repository di /var/lib/svn :
sudo su
cd /var/lib
mkdir svn
svnadmin create svn
chown -R www-data:www-data svn
Kemudian, modul user and groups diaktifkan(lewat https interface-nya ebox). Berikutnya, lewat https interface pula, buat group reader dan writer. Kita dapat membuat user baru, mengassign user ke kedua group tersebut.

Tambahkan isi berikut ini ke /etc/apache2/conf.d/svn-repository.conf (buat file baru):

<location /svnrepo>
Dav svn
AuthType Basic
AuthName "SVN repository"
AuthBasicProvider ldap
SVNPath /var/lib/svn
AuthLDAPURL "ldap://127.0.0.1:389/dc=ebox"
AuthLDAPGroupAttribute memberUid
AuthLDAPGroupAttributeIsDN off
<limitexcept GET PROPFIND OPTIONS REPORT>
Require ldap-group cn=writers,ou=Groups,dc=ebox
</limitexcept>
<limit GET PROPFIND OPTIONS REPORT>
Require ldap-group cn=writers,ou=Groups,dc=ebox
Require ldap-group cn=readers,ou=Groups,dc=ebox
</limit>
SVNAutoversioning on
</location>

Restart Apache Service setelah mensave file ini.
That's all...
I hope it works for you too ..

Comments

Post a Comment

Popular posts from this blog

Long running process in Linux using PHP

Background To do stuff, I usually create web-based applications written in PHP. Sometimes we need to run something that takes a long time, far longer than the 10 second psychological limit for web pages. A bit of googling in stack overflow found us this  http://stackoverflow.com/questions/2212635/best-way-to-manage-long-running-php-script , but I will tell the similar story with a different solution. One of the long running tasks that need to be run is a Pentaho data integration transformation. Difficulties in long running PHP scripts I encountered some problems when trying to make PHP do long running tasks : PHP script timeout. This could be solved by running set_time_limit(0); before the long running tasks. Memory leaks. The framework I normally use have a bit of memory issues, this can be solved either by patching the framework (ok, it is a bit difficult to do, but I did something similar in the past ) or splitting the data to process into several batches. And if you
Read more

Reverse Engineering Reptile Kernel module to Extract Authentication code

Image
 This time I will show how to (partially) reverse engineer a linux kernel module. The linux kernel module is larger than usual kernel module because it is actually a Reptile-based rootkit dropped by some hacker.  Part 1. Get basic module information First we gather basic module info by using modinfo : [root@lb lkrg-0.9.1]# modinfo falc0n filename:       /lib/modules/3.10.0-1127.10.1.el7.x86_64/kernel/sdc/falc0n.ko intree:         Y license:         GPL retpoline:       Y rhelversion:     7.8 srcversion:     81F508029A53F7490CCDB44 depends:         vermagic:       3.10.0-1127.10.1.el7.x86_64 SMP mod_unload modversions   We could also refer to the kernel module file not yet installed in the OS : [root@lb lkrg-0.9.1]# file falc0n.ko falc0n.ko: ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), BuildID[sha1]=1bde6abf4732eb620983032a47fbcf07689ece11, not stripped [root@lb lkrg-0.9.1]# modinfo falc0n.ko filename:       /root/lkrg-0.9.1/falc0n.ko intree:         Y license:         GPL retp
Read more

SAP System Copy Lessons Learned

Image
Background Earlier this year I was part of a team that does System Copy for a 20 terabyte plus SAP ERP RM-CA System. And just now I am involved in doing two system copy in just over one week, for much lesser amount of data. I think I would note some lessons learned from the experience in this blog. For the record, we are migrating from HP/UX and AIX to Linux x86 platform. Things that go wrong First, following the System Copy guide carefully is quite a lot of work - mainly because some important stuff are hidden in references in the guide. And reading a SAP note that are referenced in another SAP note, that are referenced in Installation Guide.. is a bit too much. Let me describe what thing goes wrong. VM Time drift The Oracle RAC Cluster have time drift problem, killing one instance when the other is shutting down. The cure for our VMWare-based Linux database server is hidden in SAP Note 989963 "Linux VMWARE Timing", which is basically add a tinker panic 0 in the
Read more