[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: Someone able to test SSPI / windows domain auth?

From: Jens Peters <jpeters7677_at_gmx.de>
Date: 2006-01-07 00:04:19 CET

>
> I wonder how you could ever connect to that repository.
> You've commented the 'SSPIOfferBasic On' out!
> Whenever I tried without 'SSPIOfferBasic On', it only worked
> with IE, but not with any other client or browser.
> Can you please try again with that line enabled?

Note that I'm using ssl as wel. Without ssl I can access the repos with IE
with or without 'SSPIOfferBasic On'.

But with my current config IE indeed does _not_ work in the dav locations,
but firefox or svn are just fine. On my document root I'm offering a
slightly different setup to access WebSVN to "browse" the repositories with
IE as well:

<Directory />
    Options FollowSymLinks
    AllowOverride None

        # only authenticated users may access the repository
        Require valid-user

         # how to authenticate a user
        AuthType SSPI
        AuthName "Subversion repositories"
                
        # SSPI settings
        SSPIAuth On
        SSPIAuthoritative On
        # point to domaincontroller
        SSPIDomain ds10domain.ds10.local
        SSPIOfferBasic On
        SSPIBasicPreferred On
        SSPIUsernameCase lower
</Directory>

With 'SSPIOfferBasic On' TSVN is now asking for credentials and then its
working. But the effect of sspi is gone :). The svn client is still working
fine without asking uid/pwd (with --no-auth-cache).

The repository on the foreign domain is using exactly the same setup.

>
> Maybe you should again send the patch, together with my
> explanation why it should be applied.

I will definitively do this. With your reputation in my back I should get
some feedback :)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: dev-help@tortoisesvn.tigris.org
Received on Sat Jan 7 00:06:05 2006

This is an archived mail posted to the TortoiseSVN Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.