I was recently setting up a development environment with the intent of using Bugzilla and Subversion (via WebDAV).
I needed to create/maintain user accounts for these systems, which was easy enough in Bugzilla, since it has a user maintenance front end. Subversion uses Apache's authentication mechanism, which meant running "htpasswd" to create each user along with their password.
But I had some issues with this configuration:
- Ideally, I didn't want users to have to remember two passwords for Bugzilla and Subversion. But the problem is that users maintain their own password in Bugzilla via the web interface. Once they change it, Bugzilla and Subversion passwords are out of sync.
- If a user wanted to change their Subversion password they would have to tell it to me so I could change it via htpasswd. For liability reasons, I don't want to know the user's password. I want them to be able to change it on their own, but I also don't want to give them access to the htpasswd file.
A quick and easy solution was to configure Apache to use the Bugzilla user table (stored in MySQL) to authenticate users. This can be done using the Apache module "mod_auth_mysql".