Re: TortoiseSVN, neon and SSPI

On 04.11.2011 22:55, Alon Bar-Lev wrote:
> Hello,
>
> I had a problem with TortoiseSVN-1.6, neon and SSPI [1]. It also
> happened at TortoiseSVN-1.7.0_rc1. A detailed description can be found at [1].
> In sort, neon broke the SSPI authentication.
>
> The strangest thing is that at TortoiseSVN-1.7.1 it just works! while
> looks like it
> is the same neon version.
>
> However subclipse suffers from the same error even at 1.7.1[2].
>
> I did not found any relevant change in TortoiseSVN code base, so I want to ask
> if the build system or code preparation of neon is different? Are
> there some custom
> patches added? I would like to help solving the neon issue at subclipse as well.
>
> Using serf is an option, it works correctly with SSPI since
> TortoiseSVN-1.7.0_rc1,
> however in long HTTPS sessions (checkout for example) it breaks the connection.

I didn't change anything regarding neon and/or SSPI between the 1.7.0RC
and 1.7.1.

But I noticed a problem in the thread you linked to here:
http://permalink.gmane.org/gmane.comp.web.webdav.neon.general/797

using http:// and SSPI with neon does not work at all and hasn't worked
for years. Because neon has disabled this. Only when using https://
instead of http:// the SSPI authentication with neon actually works.
Joe Orton (the developer of neon) once explained that SSPI over http is
not secure and therefore disabled in neon.
It's in the changelog for 0.26.0 (http://www.webdav.org/neon/history.html):

Win32: SSPI support is now only enabled by default for SSL sessions.

Stefan

-- 
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest Interface to (Sub)Version Control
    /_/   \_\     http://tortoisesvn.net
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=757&dsMessageId=2873712
To unsubscribe from this discussion, e-mail: [dev-unsubscribe_at_tortoisesvn.tigris.org].