RE: svnserve and SASL encryption...
From: Tristen Fielding <tristenfielding_at_hotmail.com>
Date: Fri, 1 Aug 2008 10:36:38 -0600
> Date: Thu, 31 Jul 2008 18:30:21 -0400> From: firstname.lastname@example.org> To: email@example.com> Subject: Re: svnserve and SASL encryption...> CC: firstname.lastname@example.org> > On Thu, Jul 31, 2008 at 4:11 PM, Tristen Fielding> <email@example.com> wrote:> > > End Goal: There are three of us located in different parts of the world that> > need to work on the same source code, therefore we decided to use Subversion> > 1.5 over the internet with SASL encryption.> >> > Therefore, I've installed the latest stable version of Subverion (1.5.xx)> > and TortoiseSVN for Windows on a WinXp Pro SP2 machine and started svnserve> > as a windows service without SASL encryption - things worked just fine.> >> > Next, I added SASL (using snv-book.pdf as a guide, page 163-165) with the> > following settings:> >> > -- svnserv.conf --> > use-sasl=true> > pwcheck_method: auxprop> > auxprop_plugin: sasldb> > sasldb_path: c:\trees\main\sasldb> > mech_list: DIGEST-MD5> > min-encryption = 0> > max-encryption = 256> >> > I created the sasl file, verified that the registry is configured correctly> > and when I tested this configuration using TortoiseSVN things still worked> > (I get a username/password prompt and I can see the depot).> >> > Next, I changed min-encryption = 1, things still worked.> >> > But when I changed min-encryption to 2 or 128, I get an unknown error (-1)> > when trying to browse the depot using TortoiseSVN.> >> > I'm not sure what I'm doing wrong, any ideas?> > One of the items in the TortoiseSVN 1.5.1 changelog was to compile> SASL DigestMD5 with support for encryption. So you would need> TortoiseSVN 1.5.1 and your server binaries will also need this> support. I can say that the CollabNet Windows binaries do NOT have> this support compiled in either. We are looking into it.> > -- > Thanks> > Mark Phippard> http://markphip.blogspot.com/
This is an archived mail posted to the Subversion Users mailing list.