[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: [TSVN] FAQ entries

From: Molle Bestefich <molle.bestefich_at_gmail.com>
Date: 2005-05-31 09:38:42 CEST

Lübbe Onken wrote:
>> More questions:
>>
>> Don't http://tortoisesvn.sourceforge.net/?q=node/89 and

Quoting:
===============
> Does TortoiseSVN support Kerberos authentication?
>
> Short Answer: No.
> Long answer: Subversion (and TortoiseSVN) depend on the neon library for that > kind of stuff. And neon doesn't support that (yet). But it's planned.
===============

Technically, the above is correct, as Subversion does not have
built-in Kerberos support.

But it's hardly appropriate for a FAQ. How about something like:
"Kerberos authentication (the authentication mechanism used in newer
versions of Windows) can be integrated to work seamlessly with
Subversion by using Apache on the server side along with
mod_auth_sspi.

Be sure to get a version of mod_auth_sspi with <whatever patches it is
that makes it work, the original doesn't>."

>> http://tortoisesvn.sourceforge.net/?q=node/48 say something contradictory?

Quoting:
> Can I use Windows authentication with a repository hosted on a Linux server?
>
> Yes. Use Apache as your Subversion server.
>
> You can use NTLM modules for Apache, or any other authentication software compatible with the Kerberos protocol to authenticate against a Windows domain, Active Directory, etc.

Is this correct? I know that NTLM != Kerberos.. Is mod_auth_sspi a NTLM module?
And is this the module referred to?

> Included with the newest versions of the Samba software is a PAM module that allows Unix boxes to generally pass any authentication through to your local Windows setup. This can probably also be used. For more information, search the web for NTLM and Kerberos.

Seems correct.. Only applies to subversion servers that perform
impersonation of the user logging in, eg. svn+ssh (and svn?), which
should perhaps be mentioned.

> And of course: This is actually a server question which has little to do with TortoiseSVN, and thus further information should be sought on the Subversion [users@...] mailing list.

Shouldn't that be "consult the Subversion FAQ first, then the mailing list"?

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: dev-help@tortoisesvn.tigris.org
Received on Tue May 31 09:39:12 2005

This is an archived mail posted to the TortoiseSVN Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.