Wiki

Clone wiki

scm-manager-plugins / Htpasswd

SCM-Manager .htpasswd plugin

This plugin is for those people who want to migrate their Subversion repositories to SCM-Manager and that are using an Apache server for user authentication.

See release notes.

##GENERAL If you want to perform this migration without the plugin you have to add each user manually to SCM-Manager, because you can´t get the passwords from the server. They are stored encrypted in the .htpasswd-file and it isn´t possible to decrypt them. This leads to double effort since the administrator has to add all users, each with a random password. These passwords need again to be changed by the users in order to ensure their secret.

The Htpasswd-plugin is the solution to this problem. It identifies users against the .htpasswd-file of the Apache by adding a new authentication resource like LDAP, crowd or the xml-file to SCM-Manager. If someone wants to login to SCM-Manager with unknown login information, the system searches through the .htpasswd-file and if a corresponding user is found it adds a new user to SCM-Manager with the name and password from the .htpasswd-file.

##USAGE After the plugin was installed and the application server is restarted you can configure the plugin in the "General" screen. You only have to fill in the path of the htpasswd-file and restart the application server once more. Afterwards users can login to SCM-Manager with username and password from the htpasswd-file.

The plugin adds user with the name that is stored in the .htpasswd-file. The password of a user remains stored and encrypted in the .htpasswd-file.

##MANAGEMENT OF REPOSITORY PERMISSIONS

In order to facilitate the permission management we want to show you the different possibilities of SCM-Manager in permission assignment. Depending on your permission structure you can choose between these options:

adding each user individually with read or write rights to each repository, this is the most elaborate way other possibilities, offered by SCM-Manager, are: creating groups and adding them to repositories using the "_authenticated" -group to add all users at once to a repository assigning global permissions to users or groups.

Updated