TortoiseSVN - Delegate kerberos credential

Hello,

I setup our SVN server for AD SSO by using Apache, DAV module, keberos authentication and ldap authorization.

The goal is to have full AD integration: SSO on user side (implies kerberos authentication) and use AD groups for authorization.

From functionality point of view, everything works just fine, we have full AD SSO, users are able to do all required actions and we are able to use AD groups for authorization.

The downside of this setup is that Kerberos authentication induces an observable slowness when a commit\checkout of a large number of files takes places. Authentication is performed for each file that has to be committed\checked out.

I was wondering if enabling kerberos credential saving (KrbSaveCredentials On) on server side will speed up things.

I configured the server for credential saving. For example when I access the repo via browser I can see the credentials being cached on the server and in the server logs the message "the client delegate us their credential" .

But when I access the repo via TortoiseSVN, kerberos credentials are not saved on the server; the client does not delegate\forward credentials. Is this something that can be configured on TortoiseSVN side ?

Do other users reported any slowness when using Kerberos auth ?

Regards,
Ionut

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=3112586

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2015-04-14 17:23:46 CEST