Hello,
today I have another situation with TSVN + linux apache (with
mod_auth_kerb) + Windows AD. I'm able from windows use Firefox or IE
without username/password but TSVN and cmd-line svn asking me for
username/password. In apache error_log I see:
[Mon Aug 18 11:04:04 2008] [debug] src/mod_auth_kerb.c(1334): [client IP] Verifying client data using KRB5 GSS-API
[Mon Aug 18 11:04:04 2008] [debug] src/mod_auth_kerb.c(1350): [client IP] Verification returned code 589824
[Mon Aug 18 11:04:04 2008] [debug] src/mod_auth_kerb.c(1377): [client IP] Warning: received token seems to be NTLM, which isn't supported by the Kerb eros module. Check your IE configuration.
[Mon Aug 18 11:04:04 2008] [error] [client 192.168.38.33] gss_accept_sec_context() failed: Invalid token was supplied (No error)
I'm unable to ask Mr. Google with right keywords. I don't know why there is
some difference between FF,IE and SVN.
/etc/krb5.conf
libdefaults]
default_realm = REALM
ccache_type = 4
dns_lookup_realm = false
dns_lookup_kdc = false
forwardable = yes
kdc_timesync = 1
proxiable = no
ticket_lifetime = 24h
[realms]
REALM = {
kdc = kdc.domain:88
admin_server = kdc.domain
default_domain = DOMAIN
}
[domain_realm]
.domain = REALM
domain = REALM
httpd (apache) mod_auth_kerb related config:
#Auth stuff
AuthType Kerberos
AuthName "Testing v1.5"
KrbMethodNegotiate on
KrbMethodK5Passwd on
KrbAuthoritative on
KrbAuthRealms REALM
Krb5Keytab /path/file.keytab
KrbSaveCredentials off
Do you have any idea?
Luf
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_tortoisesvn.tigris.org
For additional commands, e-mail: users-help_at_tortoisesvn.tigris.org
Received on 2008-08-18 17:31:43 CEST