[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: SSPIPerRequestAuth

From: Stefan Küng <tortoisesvn_at_gmail.com>
Date: Tue, 09 Sep 2008 20:31:06 +0200

Purple Streak wrote:
> 2008/9/8 Stefan Küng <tortoisesvn_at_gmail.com>:
>> Purple Streak wrote:
>>> I just looked at the mod_auth_sspi code.. and for SSPIPerRequestAuth it has
>>>
>>> "set to 'on' if you want authorization per request instead of per connection"
>>>
>>> I'd read previously on this list
>>> that leaving it off meant it would authenticate each data packet?
>>
>> You'd have to ask that on the mod_auth_sspi support forums.
>
> Sure - I'm slowly getting up to speed on what sspi etc. all is :)
>
> Here though I was referring to a previous mail
> (http://svn.haxx.se/tsvnusers/archive-2008-07/1060.shtml) where you
> said it was per-datapacket so I was wondering if you can remember
> where you heard that from? There seems to be amazingly little on the
> web about it! (maybe i'm just not googling the right words)

I think it all depends on the definition of 'connection' and 'request'.
It could be that mod_auth_sspi has changed in recent versions. The
configuration switch was added because I discovered massive traffic.
Took me a few days to debug the problem, then I found that it was due to
SSPI authenticating every single packet from scratch.
That then lead to changes in neon and mod_auth_sspi. But that was more
than a year ago. I don't know what has changed in those libs since then.

Stefan

-- 
       ___
  oo  // \\      "De Chelonian Mobile"
 (_,\/ \_/ \     TortoiseSVN
   \ \_/_\_/>    The coolest Interface to (Sub)Version Control
   /_/   \_\     http://tortoisesvn.net

Received on 2008-09-09 20:31:30 CEST

This is an archived mail posted to the TortoiseSVN Users mailing list.