[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Auth works for all client PCs, except one

From: Jody Shumaker <jody.shumaker_at_gmail.com>
Date: 2006-01-03 20:15:04 CET

On 1/2/06, Stefan Küng <tortoisesvn@gmail.com> wrote:
>
> Jody Shumaker wrote:
> > I'm actually seeing a similar but opposite problem. I don't get prompted
> > with username/password, but get rejected. Updated to 1.3.0rc1, and it
> > started getting authorization errors:
> > Error: PROPFIND request failed on '**************'
> > Error: PROPFIND of '**************': 401 Authorization Required
> > (https://**************)
> >
> > Nothing has been changed on the apache server, and everything works for
> > other users. I tried clearing the authentication cache and that didn't
> > help. I'll try uninstalling, rebooting, installing, rebooting when I get
> > a chance. Is there possibly something with my apache config that caused
> > 1.3.0RC1 to fail where 1.2.6 did not?
>
> Please check the apache error log. What does it tell you there?
>
> Oh, please note that TSVN 1.3.0RC1 now uses neon0.25.4 which can
> automatically authenticate with SSPI. So if you have SSPI set up on your
> apache server, you might have to check that one too. (especially
> username/password should match your windows login).
>
> Stefan

This is the issue, apache log shows it as user Guest. Can TortoiseSVN be
changed so it prompts the user if the current credentials fail? This all
worked fine before, but now anyone trying to access the server outside the
office will likely have this problem.

There also seems to be another oddity thatt this change might be causing.
One user pointed out that some operations are slower with the 1.3.0RC1.
Checking apache logs, 1.2.4 client would query the server once getting a 401
authentication error, then it would use proper login for the next batch of
queries. 1.3.0RC1 client does 2 queries that end up in 401's before doing a
proper query for every single query. Something that took 1 bad query and 9
good queries in 1.2.4 is now taking 18 bad queries and 9 good queries. We've
only specifically noticed this problem with checking diffs but it probably
has to do with the number of http queries involved. This seems like though
something I should be reporting on the SVN list?

1.2.4 client request in apache log:

10.0.0.89 - - [03/Jan/2006:13:57:07 -0500] "PROPFIND
/svn/AccuSoft/trunk/Products/ImageGear/IG.NET/Build/JPEG2K/JP2Format.cs
HTTP/1.1" 401 401
10.0.0.89 - jodys [03/Jan/2006:13:57:07 -0500] "PROPFIND
/svn/AccuSoft/trunk/Products/ImageGear/IG.NET/Build/JPEG2K/JP2Format.cs
HTTP/1.1" 207 764
10.0.0.89 - jodys [03/Jan/2006:13:57:07 -0500] "PROPFIND
/svn/AccuSoft/!svn/vcc/default HTTP/1.1" 207 463
10.0.0.89 - jodys [03/Jan/2006:13:57:07 -0500] "PROPFIND
/svn/AccuSoft/!svn/bc/873/trunk/Products/ImageGear/IG.NET/Build/JPEG2K/JP2Format.cs
HTTP/1.1" 207 776
10.0.0.89 - jodys [03/Jan/2006:13:57:07 -0500] "PROPFIND
/svn/AccuSoft/trunk/Products/ImageGear/IG.NET/Build/JPEG2K/JP2Format.cs
HTTP/1.1" 207 764
10.0.0.89 - jodys [03/Jan/2006:13:57:07 -0500] "PROPFIND
/svn/AccuSoft/!svn/vcc/default HTTP/1.1" 207 463
10.0.0.89 - jodys [03/Jan/2006:13:57:07 -0500] "PROPFIND
/svn/AccuSoft/!svn/bc/873/trunk/Products/ImageGear/IG.NET/Build/JPEG2K/JP2Format.cs
HTTP/1.1" 207 1677
10.0.0.89 - jodys [03/Jan/2006:13:57:07 -0500] "PROPFIND
/svn/AccuSoft/trunk/Products/ImageGear/IG.NET/Build/JPEG2K/JP2Format.cs
HTTP/1.1" 207 764
10.0.0.89 - jodys [03/Jan/2006:13:57:07 -0500] "PROPFIND
/svn/AccuSoft/!svn/vcc/default HTTP/1.1" 207 463
10.0.0.89 - jodys [03/Jan/2006:13:57:07 -0500] "PROPFIND
/svn/AccuSoft/!svn/bc/873/trunk/Products/ImageGear/IG.NET/Build/JPEG2K/JP2Format.cs
HTTP/1.1" 207 506
10.0.0.89 - jodys [03/Jan/2006:13:57:07 -0500] "GET
/svn/AccuSoft/!svn/bc/873/trunk/Products/ImageGear/IG.NET/Build/JPEG2K/JP2Format.cs
HTTP/1.1" 200 29267

1.3.0rc1 client request in apache log:

10.0.0.67 - - [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/trunk/Products/ImageGear/IG.NET HTTP/1.1" 401 401
10.0.0.67 - - [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/trunk/Products/ImageGear/IG.NET HTTP/1.1" 401 401
10.0.0.67 - TomG [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/trunk/Products/ImageGear/IG.NET HTTP/1.1" 207 746
10.0.0.67 - - [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/!svn/vcc/default HTTP/1.1" 401 401
10.0.0.67 - - [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/!svn/vcc/default HTTP/1.1" 401 401
10.0.0.67 - TomG [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/!svn/vcc/default HTTP/1.1" 207 408
10.0.0.67 - - [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/!svn/bln/883 HTTP/1.1" 401 401
10.0.0.67 - - [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/!svn/bln/883 HTTP/1.1" 401 401
10.0.0.67 - TomG [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/!svn/bln/883 HTTP/1.1" 207 463
10.0.0.67 - - [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/trunk/Products/ImageGear/IG.NET HTTP/1.1" 401 401
10.0.0.67 - - [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/trunk/Products/ImageGear/IG.NET HTTP/1.1" 401 401
10.0.0.67 - TomG [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/trunk/Products/ImageGear/IG.NET HTTP/1.1" 207 746
10.0.0.67 - - [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/!svn/vcc/default HTTP/1.1" 401 401
10.0.0.67 - - [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/!svn/vcc/default HTTP/1.1" 401 401
10.0.0.67 - TomG [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/!svn/vcc/default HTTP/1.1" 207 408
10.0.0.67 - - [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/!svn/bln/883 HTTP/1.1" 401 401
10.0.0.67 - - [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/!svn/bln/883 HTTP/1.1" 401 401
10.0.0.67 - TomG [03/Jan/2006:13:57:12 -0500] "PROPFIND
/svn/AccuSoft/!svn/bln/883 HTTP/1.1" 207 463
10.0.0.67 - - [03/Jan/2006:13:57:13 -0500] "PROPFIND
/svn/AccuSoft/trunk/Products/ImageGear/IG.NET HTTP/1.1" 401 401
10.0.0.67 - - [03/Jan/2006:13:57:13 -0500] "PROPFIND
/svn/AccuSoft/trunk/Products/ImageGear/IG.NET HTTP/1.1" 401 401
10.0.0.67 - TomG [03/Jan/2006:13:57:13 -0500] "PROPFIND
/svn/AccuSoft/trunk/Products/ImageGear/IG.NET HTTP/1.1" 207 746
10.0.0.67 - - [03/Jan/2006:13:57:13 -0500] "PROPFIND
/svn/AccuSoft/!svn/vcc/default HTTP/1.1" 401 401
10.0.0.67 - - [03/Jan/2006:13:57:13 -0500] "PROPFIND
/svn/AccuSoft/!svn/vcc/default HTTP/1.1" 401 401
10.0.0.67 - TomG [03/Jan/2006:13:57:13 -0500] "PROPFIND
/svn/AccuSoft/!svn/vcc/default HTTP/1.1" 207 463
10.0.0.67 - - [03/Jan/2006:13:57:13 -0500] "REPORT
/svn/AccuSoft/!svn/bc/883/trunk/Products/ImageGear/IG.NET HTTP/1.1" 401 401
10.0.0.67 - - [03/Jan/2006:13:57:13 -0500] "REPORT
/svn/AccuSoft/!svn/bc/883/trunk/Products/ImageGear/IG.NET HTTP/1.1" 401 401
10.0.0.67 - TomG [03/Jan/2006:13:57:13 -0500] "REPORT
/svn/AccuSoft/!svn/bc/883/trunk/Products/ImageGear/IG.NET HTTP/1.1" 200
45888

Could my apache auth possibly be changed?

<Location /svn>
DAV svn
SVNParentPath E:\svn\repositories
AuthName "Subversion repositories"
SSPIAuth On
SSPIAuthoritative On
SSPIDomain XYZ.COM
SSPIOfferBasic On
SSPIOmitDomain On # remove domain name in userid string
                  # passed down to mod_authz_svn
AuthType SSPI

AuthzSVNAccessFile E:\svn\svnaccessfile.conf
Require valid-user
</Location>

Thanks,
Jody
Received on Tue Jan 3 20:34:27 2006

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.