Re: SSPIPerRequestAuth

2008/9/6 Stefan Küng <tortoisesvn_at_gmail.com>:
> Purple Streak wrote:
>> 2008/9/5 Stefan Küng <tortoisesvn_at_gmail.com>:
>>> Subversion doesn't really know about the authentication, it uses other
>>> modules to do that job. For SSPI authentication, it's the neon library
>>> that does the job.
>>> But neon does the authentication according to the data it gets from the
>>> server. And simply activating SSPIPerRequestAuth should not change the
>>> authentication, at least not as far as I know.
>>> So I would suspect that this is a problem of the mod_auth_sspi module.

I just looked at the mod_auth_sspi code.. and for SSPIPerRequestAuth it has

"set to 'on' if you want authorization per request instead of per connection"

Now does that mean if you open one https connection and use keepalive
to send several requests that turning this option off actually means
you authenticate less and not more? I'd read previously on this list
that leaving it off meant it would authenticate each data packet?

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_tortoisesvn.tigris.org
For additional commands, e-mail: users-help_at_tortoisesvn.tigris.org
Received on 2008-09-07 21:18:13 CEST