[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: GSSAPI auth stopped working after upgrade

From: Philip Martin <philip.martin_at_wandisco.com>
Date: Wed, 07 Dec 2011 09:56:50 +0000

Victor Sudakov <sudakov_at_sibptus.tomsk.ru> writes:

> I have upgraded the svn client from subversion-1.6.17 to
> subversion-1.7.2 on FreeBSD 7.4 and GSSAPI authentication stopped
> working. svn does not even try to get a Kerberos ticket and tries to
> use DIGEST-MD5 at once. The server is still subversion-1.6.16_1 (no
> changes there).
>
> What has happened and how can I get back my GSSAPI? Please help. Need
> I now to enable something on the client side?
>
> If I disable the digest-md5 mech on the server, like
> (mech_list: gssapi anonymous), I get:

Few Subversion developers have worked on the SASL code, there may be
more SASL expertise on the users list.

I seem to recall an issue about choosing the mechanism: the server
expects the client to choose the most suitable, but the client expects
the server to suggest the most suitable and so doesn't have any sort of
selection hierarchy. Perhaps that is the problem?

Have you tried with "mech_list: gssapi" so that the client has no choice?

-- 
uberSVN: Apache Subversion Made Easy
http://www.uberSVN.com
Received on 2011-12-07 10:57:32 CET

This is an archived mail posted to the Subversion Dev mailing list.