[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: TortoiseSVN and MIT Kerberos for Windows

From: Ludek Finstrle <luf_at_pzkagis.cz>
Date: Thu, 13 Mar 2008 15:54:33 +0100

Hello

Thu, Mar 13, 2008 at 01:09:48PM +0000, Matthew Richardson napsal(a):
> > Unfortunately no one tried that version with SSPI. So I don't know
> > if it doesn't break SSPI. The definitions in protocols array in neon
> > is same for GSSAPI and SSPI (exclude function pointers) ...
> >
>
> I could potentially test the SSPI functions on the msi you made
> previously, provided you can confirm what the test steps would be
> (I have access to windows servers and an Active Directory for testing).

I'm not familier with AD so I can't say the steps.
As I see in neon the Win SSPI auth should use NTLM or Negotiate.
It's needed to test SSPI/Negotiate as it has same definition as
GSSAPI/Negotiate.

Using SSPI is described here:
http://tortoisesvn.net/docs/release/TortoiseSVN_en/tsvn-serversetup.html#tsvn-serversetup-apache-5
I read somewhere:
if there is kerberos ticket (not the MIT on) SSPI uses the Negotiate
else it uses NTLM auth.

In TSVN should be ok to access repo browser (go throught authentization).

Thanks a lot for the test effort.

> > I'm looking on neon and dynamic GSSAPI loading. But I'm limited with
> > free time right now. The next step will be to implement GSSAPI into TSVN.
>
> This would be most useful as its this that I'm most interested in,
> as we're supporting cross-platform clients against linux servers.

I'm using only MIT krb but this is the only way to propagate the change
into TSVN source code.

Regards,

Luf

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_tortoisesvn.tigris.org
For additional commands, e-mail: users-help_at_tortoisesvn.tigris.org
Received on 2008-03-13 15:54:52 CET

This is an archived mail posted to the TortoiseSVN Users mailing list.