Re: GSSAPI auth stopped working after upgrade

Victor Sudakov <sudakov_at_sibptus.tomsk.ru> writes:

> I have upgraded the svn client from subversion-1.6.17 to
> subversion-1.7.2 on FreeBSD 7.4 and GSSAPI authentication stopped
> working. svn does not even try to get a Kerberos ticket and tries to
> use DIGEST-MD5 at once. The server is still subversion-1.6.16_1 (no
> changes there).
>
> What has happened and how can I get back my GSSAPI? Please help. Need
> I now to enable something on the client side?
>
> If I disable the digest-md5 mech on the server, like
> (mech_list: gssapi anonymous), I get:

Few Subversion developers have worked on the SASL code, there may be
more SASL expertise on the users list.

I seem to recall an issue about choosing the mechanism: the server
expects the client to choose the most suitable, but the client expects
the server to suggest the most suitable and so doesn't have any sort of
selection hierarchy. Perhaps that is the problem?

Have you tried with "mech_list: gssapi" so that the client has no choice?

-- 
uberSVN: Apache Subversion Made Easy
http://www.uberSVN.com