Stefan Küng wrote:
> Yu Yokota wrote:
> > Stefan Küng wrote:
> > > You can configure mod_auth_sspi to always use basic authentication
> with:
> > >
> > > SSPIBasicPreferred on
> >
> > Thanks for your quick reply.
> > I have been trying to shut off the SSPI from the auth_sspi's end but no
> > luck so far.
> That should have worked. Did you restart the apache service after
> changing the config file?
Not only have I restarted the service but also uninstalled Apache and reinstalled the latest Apache, so I am sure it's
reflecting the config.
I haven't read the source to check the handshake sequence, but I don't think "SSPIBasicPreferred on" or "SSPIOfferSSPI
off" would do what I want if TortoiseSVN is not sending out the basic auth.
INSTALL of mod_auth_sspi says:
> SSPIOfferSSPI - set to 'off' to allow access control to be passed
> along to lower modules if the UserID is not known to
> this module
Since TortoiseSVN 1.4.x sends out SSPI, UserID is known to the module, thus SSPI is used.
> SSPIBasicPreferred - set to 'on' if you want basic authentication to be
> the higher priority
Since TortoiseSVN hasn't asked me for the User Name/Password, it's not sending basic auth, so having higher priority
wouldn't matter.
I will try the nightly build, but if you could expose the http-auth-types as three checkboxes for basic, digest, and
negotiate in the Settings dialog that might make the configuration easier for less geeky crowd.
Another workaround may be to let the user type in User Name/Password in the Settings dialog that gets sent out using
Basic auth.
Thanks,
Yu
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: dev-help@tortoisesvn.tigris.org
Received on Tue Dec 11 22:02:45 2007