[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Tortoise later than 1.3.5 unable to authenticate on my computer

From: Stefan Küng <tortoisesvn_at_gmail.com>
Date: 2007-03-20 20:13:26 CET

Geir Atle Storhaug wrote:

> I have my repositories stored on a Windows 2003 Server, with Apache
> installed. I access the repositories using https. Authentication using
> DAV. The Windows 2003 server is also a domain controller for "mydomain",
> but my computer is NOT part of the domain. I authenticate as
> mydomain\myusername when accessing the repositories. I log in to my
> computer using a local account; "myusername".
>
> I am however stuck with an old version (1.3.5) of Tortoise on *my computer*.
> If I try a newer version, I get an 'PROPFIND request failed on ...: 403
> Forbidden ...' when trying to browse or otherwise access a repository. I
> have installed the latest version on other computers, and it works fine -
> connecting to the same server, using the same username and password that
> fail on my computer.
>
> I have used File Monitor from SysInternals.com to log the file access on my
> computer when trying to access the repository.
>
> Using Tortoise 1.3.5 I see that both ...\auth\svn.ssl.server and
> ...\auth\svn.simple are read. In the Apache's acces.log, domain name is
> correctly shown in lower case characters.
>
> After upgrading to 1.4.3, Tortoise only reads ...\auth\svn.ssl.server. If I
> clear my authentication data in Tortoise, 1.4.3 does recreate both
> ...\auth\svn.ssl.server and ...\auth\svn.simple. It asks me if I want to
> accept the server certificate, and then writes the server certificate to
> ...\auth\svn.ssl.server. Tortoise 1.4.3 does however *NOT* ask me for a
> user name and password. In Apace's access.log, I see that Tortoise is still
> trying to authenticate as MYDOMAIN\myusername, but now the domain name is
> now in upper case characters. Where is this domain name and user name
> stored?

Upgrade to the lastest mod_auth_sspi module. You'll find that it has
some new config options, one of them is
SSPIUsernameCase
which you can set to either 'lower' or 'higher'. This will take care of
the case issues you have with the domain. Also, it has an option
SSPIOmitDomain
which you can set to 'on'. That way the domain name is ommitted from the
username - the logs will only show the username.

Stefan

-- 
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest Interface to (Sub)Version Control
    /_/   \_\     http://tortoisesvn.net
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: users-help@tortoisesvn.tigris.org
Received on Tue Mar 20 20:13:45 2007

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.