[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

TSVN - linux httpd mod_auth_kerb - AD

From: Ludek Finstrle <luf_at_pzkagis.cz>
Date: Mon, 18 Aug 2008 17:31:28 +0200

Hello,

  today I have another situation with TSVN + linux apache (with
mod_auth_kerb) + Windows AD. I'm able from windows use Firefox or IE
without username/password but TSVN and cmd-line svn asking me for
username/password. In apache error_log I see:
[Mon Aug 18 11:04:04 2008] [debug] src/mod_auth_kerb.c(1334): [client IP] Verifying client data using KRB5 GSS-API
[Mon Aug 18 11:04:04 2008] [debug] src/mod_auth_kerb.c(1350): [client IP] Verification returned code 589824
[Mon Aug 18 11:04:04 2008] [debug] src/mod_auth_kerb.c(1377): [client IP] Warning: received token seems to be NTLM, which isn't supported by the Kerb eros module. Check your IE configuration.
[Mon Aug 18 11:04:04 2008] [error] [client 192.168.38.33] gss_accept_sec_context() failed: Invalid token was supplied (No error)

I'm unable to ask Mr. Google with right keywords. I don't know why there is
some difference between FF,IE and SVN.

/etc/krb5.conf
libdefaults]
 default_realm = REALM
 ccache_type = 4
 dns_lookup_realm = false
 dns_lookup_kdc = false
 forwardable = yes
 kdc_timesync = 1
 proxiable = no
 ticket_lifetime = 24h
[realms]
 REALM = {
  kdc = kdc.domain:88
  admin_server = kdc.domain
  default_domain = DOMAIN
 }
[domain_realm]
 .domain = REALM
 domain = REALM

httpd (apache) mod_auth_kerb related config:
#Auth stuff
AuthType Kerberos
AuthName "Testing v1.5"
KrbMethodNegotiate on
KrbMethodK5Passwd on
KrbAuthoritative on
KrbAuthRealms REALM
Krb5Keytab /path/file.keytab
KrbSaveCredentials off

Do you have any idea?

Luf

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_tortoisesvn.tigris.org
For additional commands, e-mail: users-help_at_tortoisesvn.tigris.org
Received on 2008-08-18 17:31:43 CEST

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.