Hi Stefan,
Yes, my client is using the very latest versions of Subversion 1.5.3 and TSVN 1.5.4. I did not build it. I downloaded the binaries from tigris.org. The server is running 1.5.2. But I would not expect that to account for my TSVN issue since my svn 1.5.3 client can authenticate to the 1.5.2 server.
Yes, I am trying this from the very same machine, my desktop computer.
The $ at the end of my SVNParentPath directive is the nomenclature to denote a hidden Windows file share. I should note that I was able to open my repositories with TSVN perfectly fine prior to adding the directives to authenticate using the PDC. But we don't want to run anonymously.
I am certain my computer is a member of our domain. It's required here.
I was not expecting that I would have to enter my domain/username to authenticate with SSPIOmitDomain on. But it failed when I entered just my username so I gave it a try with domain and username and it worked. This is from my svn console window so it leads me to believe my problem is TSVN:
> svn info http://vc-1/svn/myrepo
Authentication realm: <http://vc-1:80> Subversion repositories
Password for 'gillis_p': ********
Authentication realm: <http://vc-1:80> Subversion repositories
Username: mydomain\gillis_p
Password for ' mydomain\gillis_p': ********
Path: myrepo
URL: http://vc-1/svn/myrepo
Repository Root: http://vc-1/svn/myrepo
Repository UUID: be8097fc-3112-874e-b525-a36b8ade6167
Revision: 300
Node Kind: directory
Last Changed Rev: 300
Last Changed Date: 2008-10-16 16:04:16 -0400 (Thu, 16 Oct 2008)
Do you have any other suggestions? I'm stumped!
Thanks!
- Paul
>-----Original Message-----
>From: Stefan Küng [mailto:tortoisesvn_at_gmail.com]
>Sent: Friday, October 17, 2008 10:08 AM
>To: users_at_tortoisesvn.tigris.org
>Subject: Re: TSVN & Apache & SSPI & SSL problems
>
>Gillis, Paul wrote:
>> I'm having difficulty getting TSVN to authenticate correctly using
>> Apache, SSPI & SSL on Win32.
>>
>> What's most troublesome is that the Subversion command client works for
>> me, but Tortoise does not.
>
>Are you using the same version of the command line client and TSVN? Are
>both 1.5.x versions?
>And are you using both from the same machine?
>
>> I followed the directions in the TSVN manual, 3.1.7. Authentication with
>> a Windows Domain.
>>
>> Here is my httpd.conf file:
>>
>> <Location /svn>
>> DAV svn
>> SVNListParentPath on
>> SVNParentPath //netapp/svn$/
>
>why the '$' at the end? That could cause troubles...
>
>> AuthType SSPI
>> SSPIAuth On
>> SSPIAuthoritative On
>> AuthName "Subversion repositories"
>> SSPIDomain ns
>> SSPIOmitDomain on
>> SSPIUsernameCase lower
>> SSPIPerRequestAuth on
>> SSPIOfferBasic On
>> Require valid-user
>> </Location>
>>
>> When asked for a password, mydomain/myaccount will authenticate me using
>> the Subversion
>> command client. But when I try and use TSVN to browse the repository and
>> I enter the very
>> same user and password information that works perfectly with Subversion,
>> I get:
>
>You've specified "SSPIOmitDomain on" in your config file. You should
>authenticate only with "myaccount", not with "mydomain\myaccount". And
>of course, use a backslash if you do use the domain, not a forward slash.
>
>> Error validating server certificate. Unknown certificate issuer. Do you
>> want to proceed?
>>
>> If I answer yes, it prompts again for a user name and password. I enter
>> domain/username and password
>> and it comes right back at me with the same certificate validation
>> error. This is my error.log
>>
>> [Fri Oct 17 09:21:26 2008] [error] [client 10.13.100.222] (OS 87)The
>> parameter is incorrect. : authentication failure for
>> "/svn/myrepo/trunk": user unknown, reason: cannot generate context
>
>'cannot generate context' usually means that your computer is not part
>of the domain and therefore can't generate the sspi context required for
>authentication.
>
>Stefan
>
>--
> ___
> oo // \\ "De Chelonian Mobile"
> (_,\/ \_/ \ TortoiseSVN
> \ \_/_\_/> The coolest Interface to (Sub)Version Control
> /_/ \_\ http://tortoisesvn.net
This e-mail message and all attachments thereto may contain technical data that is subject to export control regulations, or confidential material, and is for the sole use of the intended recipients. Review, dissemination, or other use by anyone else is prohibited. If you are not an intended recipient, please contact the sender and delete all copies.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_tortoisesvn.tigris.org
For additional commands, e-mail: users-help_at_tortoisesvn.tigris.org
Received on 2008-10-17 16:42:51 CEST