[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: TSVN & Apache & SSPI & SSL problems

From: Stefan Küng <tortoisesvn_at_gmail.com>
Date: Fri, 17 Oct 2008 16:08:15 +0200

Gillis, Paul wrote:
> I’m having difficulty getting TSVN to authenticate correctly using
> Apache, SSPI & SSL on Win32.
> What’s most troublesome is that the Subversion command client works for
> me, but Tortoise does not.

Are you using the same version of the command line client and TSVN? Are
both 1.5.x versions?
And are you using both from the same machine?

> I followed the directions in the TSVN manual, 3.1.7. Authentication with
> a Windows Domain.
> Here is my httpd.conf file:
> <Location /svn>
> DAV svn
> SVNListParentPath on
> SVNParentPath //netapp/svn$/

why the '$' at the end? That could cause troubles...

> AuthType SSPI
> SSPIAuth On
> SSPIAuthoritative On
> AuthName "Subversion repositories"
> SSPIDomain ns
> SSPIOmitDomain on
> SSPIUsernameCase lower
> SSPIPerRequestAuth on
> SSPIOfferBasic On
> Require valid-user
> </Location>
> When asked for a password, mydomain/myaccount will authenticate me using
> the Subversion
> command client. But when I try and use TSVN to browse the repository and
> I enter the very
> same user and password information that works perfectly with Subversion,
> I get:

You've specified "SSPIOmitDomain on" in your config file. You should
authenticate only with "myaccount", not with "mydomain\myaccount". And
of course, use a backslash if you do use the domain, not a forward slash.

> Error validating server certificate. Unknown certificate issuer. Do you
> want to proceed?
> If I answer yes, it prompts again for a user name and password. I enter
> domain/username and password
> and it comes right back at me with the same certificate validation
> error. This is my error.log
> [Fri Oct 17 09:21:26 2008] [error] [client] (OS 87)The
> parameter is incorrect. : authentication failure for
> "/svn/myrepo/trunk": user unknown, reason: cannot generate context

'cannot generate context' usually means that your computer is not part
of the domain and therefore can't generate the sspi context required for


  oo  // \\      "De Chelonian Mobile"
 (_,\/ \_/ \     TortoiseSVN
   \ \_/_\_/>    The coolest Interface to (Sub)Version Control
   /_/   \_\     http://tortoisesvn.net

Received on 2008-10-17 16:08:32 CEST

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.