Re: SVN + Apache + SSPI + Proxy

2005/11/10, christophe.menard@ineo.com <christophe.menard@ineo.com>:

> [Thu Nov 10 11:40:44 2005] [error] [client xx.xx.xx.xx] (OS 1326)Échec
> d'ouverture de session : nom d'utilisateur inconnu ou mot de passe
> incorrect. : user GROUP\\cme: authentication failure for "/svn"
>
> What is really weird is the client xxx.xxx.xxx.xxx line as it's not my
> windows domain controller answering the authentication request but the
> company internet proxy.

Why? Apache is logging the ip address of the *client* that is
requesting subversion services, it has nothing to do with
authentication. And from apache's poinzt of view, the proxy is the
client connecting to the server.

I guess you have one of the windows username upper/lower case problems:
Your svnaccess.conf file lists users GROUP\CME and cme, but you are
logging on as GROUP\cme. Athentication in svn is case sensitive.

You could try to use a newer version of mod_auth_sspi:
http://www.gknw.net/development/apache/httpd-2.0/win32/modules/mod_auth_sspi-1.0.3-2.0.54.zip

and set the additional config settings:

   SSPIOmitDomain on
   SSPIUsernameCase lower

Nobert

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: users-help@tortoisesvn.tigris.org

--