SVN集成LDAP认证失败:密码不匹配问题排查求助
SVN集成LDAP认证失败:密码不匹配问题排查求助
大家好,我最近碰到一个棘手的问题——登录SVN仓库时一直弹出密码不匹配的错误,导致认证失败。我已经折腾了好一阵,试过各种办法都没解决,想请各位大佬帮忙分析下问题出在哪。
先说说我已经做过的排查操作:
- 修改过SVN服务端口,没有效果
- 用
ldapsearch查询LDAP用户能正常返回结果,说明LDAP服务器连接是正常的 - 检查过防火墙规则,389端口没有被拦截
- 也排查了SELinux的相关配置,没发现异常
- 尝试添加了Authz权限控制文件,指定AD用户访问仓库,依然无法通过认证
下面是我的相关配置文件:
10-subversion.conf 配置
LoadModule dav_svn_module modules/mod_dav_svn.so LoadModule authz_svn_module modules/mod_authz_svn.so LoadModule dontdothat_module modules/mod_dontdothat.so LoadModule ldap_module modules/mod_ldap.so LoadModule authnz_ldap_module modules/mod_authnz_ldap.so <Location /svn> DAV svn SVNParentPath /mnt/repositories AuthBasicProvider ldap AuthType basic AuthName "LDAP Authentication" AuthLDAPURL "ldap://192.0.0.1:389/DC=companyname,DC=com?sAMAccountName?sub?(objectClass=*)" AuthLDAPBindDN "CN=svn ldap,CN=Users,DC=companyname,DC=com" AuthLDAPBindPassword "pwd" Require valid-user </Location>
access.conf 权限配置
[repo:/] user1 = rw
Apache错误日志相关内容
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using fe80::250:56ff:febe:ad73%ens192. Set the 'ServerName' directive globally to suppress this message [Sat Feb 17 11:23:55.968391 2024] [lbmethod_heartbeat:notice] [pid 1847930:tid 1847930] AH02282: No slotmem from mod_heartmonitor [Sat Feb 17 11:23:55.971999 2024] [mpm_event:notice] [pid 1847930:tid 1847930] AH00489: Apache/2.4.57 (Rocky Linux) OpenSSL/3.0.7 SVN/1.14.1 configured -- resuming normal operations [Sat Feb 17 11:23:55.972059 2024] [core:notice] [pid 1847930:tid 1847930] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND' [Sat Feb 17 11:27:43.893361 2024] [auth_basic:error] [pid 1847939:tid 1848143] [client 10.0.98.1:55569] AH01617: user admin: authentication failure for "/svn/repo/": Password Mismatch
备注:内容来源于stack exchange,提问作者Alpha Lima




