[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: TSVN 1.5 + neon enabled MIT

From: Matthew Richardson <M.Richardson_at_ed.ac.uk>
Date: Thu, 17 Apr 2008 15:51:05 +0100

Ludek Finstrle wrote:
> Hello again (mainly devels),
>
> I think I found way to support MIT GSSAPI in TSVN 1.5. I create
> patch only for neon. It isn't finall version. The final one I'll try
> put into neon HEAD devel. But I need this feature in TSVN 1.5 so
> I send it here first.

> I tested MIT GSSAPI and Basic auth with and without gssapi32.dll.
> It works well. The only way which isn't supported is SSPI auth
> with gssapi32.dll in path (so MIT GSSAPI is expected). SSPI
> without gssapi32.dll in path should work well (testers are welcome).

I can confirm that this patch works as expected - following test done:

1) TortoiseSVN installed, MIT Kerberos installed but not in path.

Commits to repository (running mod_auth_sspi) shows user as windows 'login' ticket.

2) MIT Kerberos added to path (c:\Program Files\MIT\Kerberos\bin)

Commits to repository (running mod_auth_krb with "KrbMethodK5Passwd off") shows user as
that in MIT's default ticket.

MIT Kfw also seems to pick up the 'login ticket' and will use that unless a different
ticket is set as default, so if MIT Kfw is installed, end-users will still be able to use
their login-granted ticket against SSPI-enabled repositories.

I'd like to request that this be added to the HEAD, since it will enable Kfw functionality
and shows no degradation of kerberos services for non-Kfw or 'accidental' Kfw users.

Matthew

-- 
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_tortoisesvn.tigris.org
For additional commands, e-mail: users-help_at_tortoisesvn.tigris.org
Received on 2008-04-17 16:52:51 CEST

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.