[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Kerberos support

From: Chris Rodgers <rodgers_at_physchem.ox.ac.uk>
Date: 2006-08-24 19:01:06 CEST

Chris Rodgers wrote:
> Hi,
>
> Should it be possible to use a kerberos-enabled SVN repository with
> TortoiseSVN?
>
> If so, does anyone have any tips for getting it to work?
>
> However, TortoiseSVN doesn't seem to be aware that it can use this
> ticket for authentication - just giving an access denied error. The
> webserver logs show that no kerberos ticket was presented to Apache by
> TortoiseSVN.

P.S. I have now enabled LogLevel debug on the apache SSL server (I had
previously thought that the httpd.conf entry applied to SSL too).

When I try to checkout a file using TortoiseSVN, here is what appears in
the log:

[Thu Aug 24 17:39:41 2006] [debug] src/mod_auth_kerb.c(1342): [client
129.67.105.110] kerb_authenticate_user entered with user (NULL) and
auth_type Kerberos
[Thu Aug 24 17:39:41 2006] [debug] src/mod_auth_kerb.c(1044): [client
129.67.105.110] Acquiring creds for
HTTP/crt5.chem.ox.ac.uk@CRT5.CHEM.OX.AC.UK
[Thu Aug 24 17:39:41 2006] [debug] src/mod_auth_kerb.c(1175): [client
129.67.105.110] Verifying client data using KRB5 GSS-API
[Thu Aug 24 17:39:41 2006] [debug] src/mod_auth_kerb.c(1191): [client
129.67.105.110] Verification returned code 589824
[Thu Aug 24 17:39:41 2006] [debug] src/mod_auth_kerb.c(1217): [client
129.67.105.110] Warning: received token seems to be NTLM, which isn't
supported by the Kerberos module. Check your IE configuration.

Does anyone have any idea how to disable NTLM and persuade TortoiseSVN
to use my valid kerberos ticket?

Chris.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: dev-help@tortoisesvn.tigris.org
Received on Thu Aug 24 19:27:06 2006

This is an archived mail posted to the TortoiseSVN Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.