Purple Streak wrote:
> 2008/9/8 Stefan Küng <tortoisesvn_at_gmail.com>:
>> Purple Streak wrote:
>>> I just looked at the mod_auth_sspi code.. and for SSPIPerRequestAuth it has
>>>
>>> "set to 'on' if you want authorization per request instead of per connection"
>>>
>>> I'd read previously on this list
>>> that leaving it off meant it would authenticate each data packet?
>>
>> You'd have to ask that on the mod_auth_sspi support forums.
>
> Sure - I'm slowly getting up to speed on what sspi etc. all is :)
>
> Here though I was referring to a previous mail
> (http://svn.haxx.se/tsvnusers/archive-2008-07/1060.shtml) where you
> said it was per-datapacket so I was wondering if you can remember
> where you heard that from? There seems to be amazingly little on the
> web about it! (maybe i'm just not googling the right words)
I think it all depends on the definition of 'connection' and 'request'.
It could be that mod_auth_sspi has changed in recent versions. The
configuration switch was added because I discovered massive traffic.
Took me a few days to debug the problem, then I found that it was due to
SSPI authenticating every single packet from scratch.
That then lead to changes in neon and mod_auth_sspi. But that was more
than a year ago. I don't know what has changed in those libs since then.
Stefan
--
___
oo // \\ "De Chelonian Mobile"
(_,\/ \_/ \ TortoiseSVN
\ \_/_\_/> The coolest Interface to (Sub)Version Control
/_/ \_\ http://tortoisesvn.net
Received on 2008-09-09 20:31:30 CEST