Configuring Sublime with Apache

This document describes how to install Sublime on a Subversion server that has been configured for Active Directory or LDAP authentication using Apache.

Before Installing Sublime

Before you install Sublime you should make sure your server has Apache installed and configured to support LDAP or Active Directory authentication. For more information, see this blog post describing how to configure Subversion and Apache using the Collabnet installer.

Before proceeding, configure the following points concerning Sublime support for Apache configurations.

• The username attribute must be sAMAccountName. Although mod_authnz_ldap allows you to choose which attribute should be used as the username, Sublime requires that you use sAMAccountName.
• Sublime does not yet support path-based permissions within a repository. Permissions are granted for the entire repository only. If you are currently using path-based permissions within your existing repositories you may not want to manage those repositories with Sublime until this feature is supported.

Disable Apache on Port 80

If Apache is currently listening on Port 80 you should either stop the Apache service or configure it to listen on a different port while you install Sublime. After Sublime has been installed you may change back to Port 80.

After Sublime has been Installed

After Sublime has been installed and you have completed the final configuration steps, you should complete the following:

• Finish configuring IIS
• Update Sublime Settings
• Copy existing Access file

Finish Configuring IIS

Sublime and Apache each need their own TCP port. The first step is to decide which port Sublime should use and which port Apache should use. This will impact the URL users use to access Sublime and the URL users use to access their repositories.

For example, if you want Sublime to use port 80 and Apache to use port 8080, users will access Sublime by navigating to http://yourserver while repositories can be checked out from http://yourserver:8080. Once you have chosen a port for Apache and Sublime, you can configure the Sublime website using the IIS Management Console and edit your httpd.conf file to change Apache’s listening port.

You may need to reset IIS and the Apache service after making these changes.

Update Sublime Settings

There are two settings that should be configured within Sublime: Repository Path and Repository Access URL. For both, open Sublime, navigate to the Administration pages, and click on the Settings tab.

Repository Path. If you have existing repositories change this path to point at the folder containing your repositories (i.e. C:\svn_repository).

Remote Access URL. Set this to match your Apache configuration for the port number and path to your repositories. For example, if Apache is set to listen on port 8080, and your repositories are hosted at the location of /svn, you would enter http://servername:8080/svn as your Remote Access URL.

Copy Existing Access File

To allow Sublime to manage permissions for your existing repositories, you must move your permission settings from the existing access file into Sublime’s authz file.

1. Locate your existing authorization file (i.e. C:\svn_repository\access.txt) and open it in notepad.
2. Copy the entire contents of the file into your clipboard.
3. Navigate to the bin folder in your Sublime installation directory (i.e. C:\Program Files\Sublime\bin)
4. Open the “authz” file in notepad
5. Paste the contents of your clipboard into this file and save it.
6. Open your httpd.conf file (or which ever config file contains your Subversion auth configuration settings)
7. Locate the setting for your access file (i.e. AuthzSVNAccessFile)
8. Change the path to point to the authz file in your Sublime bin folder (i.e. AuthzSVNAccessFile "C:/Program Files/Sublime/bin/authz")
9. Reset IIS by opening a command prompt and entering C:\> iisreset
10. Restart the Apache service

Sublime should pick up your existing permissions at this point. You can confirm this by browsing to an existing repository in Sublime and checking which users have access.

From this point on, the authz file in your Sublime folder will be used to manage access. You may delete your old access file if you like.