[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

GSSAPI auth stopped working after upgrade

From: Victor Sudakov <sudakov_at_sibptus.tomsk.ru>
Date: Wed, 7 Dec 2011 00:22:47 +0700

Colleagues,

I have upgraded the svn client from subversion-1.6.17 to
subversion-1.7.2 on FreeBSD 7.4 and GSSAPI authentication stopped
working. svn does not even try to get a Kerberos ticket and tries to
use DIGEST-MD5 at once. The server is still subversion-1.6.16_1 (no
changes there).

What has happened and how can I get back my GSSAPI? Please help. Need
I now to enable something on the client side?

If I disable the digest-md5 mech on the server, like
(mech_list: gssapi anonymous), I get:

$ svn co svn://big/configs
svn: E210007: Unable to connect to a repository at URL 'svn://big/configs'
svn: E210007: Cannot negotiate authentication mechanism

# ldd `which svn` | egrep 'gss|sas'
        libsasl2.so.2 => /usr/local/lib/libsasl2.so.2 (0x281fc000)
        libgssapi.so.9 => /usr/lib/libgssapi.so.9 (0x284de000)

This is what happens on the net:

010.014.134.005.03690-010.014.134.125.54580: ( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries commit-revprops depth log-revprops partial-replay ) ) )
010.014.134.125.54580-010.014.134.005.03690: ( 2 ( edit-pipeline svndiff1 absent-entries depth mergeinfo log-revprops ) 17:svn://big/configs 9:SVN/1.7.2 ( ) )
010.014.134.005.03690-010.014.134.125.54580: ( success ( ( GSSAPI DIGEST-MD5 ) 16:SIBPTUS.TOMSK.RU ) )
010.014.134.125.54580-010.014.134.005.03690: ( DIGEST-MD5 ( ) )
010.014.134.005.03690-010.014.134.125.54580: ( step ( 256:bm9uY2U9InRKNHprMDdWV04yeE53UGlja25SU3BvV0ZaODlJSk1IeGlVb3ExOUhVM3M9IixyZWFs
bT0iU0lCUFRVUy5UT01TSy5SVSIscW9wPSJhdXRoLGF1dGgtaW50LGF1dGgtY29uZiIsY2lwaGVy
PSJyYzQtNDAscmM0LTU2LHJjNCxkZXMsM2RlcyIsbWF4YnVmPTQwOTYsY2hhcnNldD11dGYtOCxh
bGdvcml0aG09bWQ1LXNlc3M=
 ) )
010.014.134.125.54580-010.014.134.005.03690: 357:dXNlcm5hbWU9InN1ZGFrb3YiLHJlYWxtPSJTSUJQVFVTLlRPTVNLLlJVIixub25jZT0idEo0emsw
N1ZXTjJ4TndQaWNrblJTcG9XRlo4OUlKTUh4aVVvcTE5SFUzcz0iLGNub25jZT0iTkxTUlRJQ1Z1
NTByVVMwemNDOVZjdVl6ZUlaM3dYOTIwQi9EMEcwV25tVT0iLG5jPTAwMDAwMDAxLHFvcD1hdXRo
LWNvbmYsY2lwaGVyPXJjNCxtYXhidWY9NDA5NixkaWdlc3QtdXJpPSJzdm4vYmlnIixyZXNwb25z
ZT0zZDI3MDgzNjUxZThmY2U2MjVjYmNkMGQ1MGZkNTYxYQ==
 
010.014.134.005.03690-010.014.134.125.54580: ( failure ( 48:SASL(-13): user not found: no secret in database ) )
010.014.134.125.54580-010.014.134.005.03690: ( DIGEST-MD5 ( ) )
010.014.134.005.03690-010.014.134.125.54580: ( step ( 256:bm9uY2U9IkhsL29VdHFwZ0tESS9FMFVRajl4K212aUQwRjlhWnhZL1c4d1lTS2g2V0k9IixyZWFs
bT0iU0lCUFRVUy5UT01TSy5SVSIscW9wPSJhdXRoLGF1dGgtaW50LGF1dGgtY29uZiIsY2lwaGVy
PSJyYzQtNDAscmM0LTU2LHJjNCxkZXMsM2RlcyIsbWF4YnVmPTQwOTYsY2hhcnNldD11dGYtOCxh
bGdvcml0aG09bWQ1LXNlc3M=
 ) )

Thank you very much in advance.

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:sudakov_at_sibptus.tomsk.ru
Received on 2011-12-06 18:23:24 CET

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.