At work we have a subversion repository that is exposed via an Apache web server only. The repository is private and thus the webserver is in charge of authenticating the users against an LDAP. This is working so far, but now I'd like to add authentication by client certificates, while the basic auth against the LDAP should still work. This should enable me to share the certificates to continous integration servers, so that they are able to access the repository without forcing me to add "technical users" to the LDAP.
Setting up client cert authentication itself is not a problem but mixing both authentication methods doesn't work. What I'd like to have is multiple auth providers (e.g. via AuthnProviderAlias) and use these. Until now I was not able to find a suitable auth module to define the client cert authentication as auth provider.
I could define multiple location with different authentication methods but I really would like to keep them in one place/one URL.
System: Ubuntu, Apache 2, SVN, OpenLDAP
Maybe someone has faced the same problems and can give me some hints.