Re: TSVN & Apache & SSPI & SSL problems

Gillis, Paul wrote:
> Hi Stefan,
>
> Yes, my client is using the very latest versions of Subversion 1.5.3
> and TSVN 1.5.4. I did not build it. I downloaded the binaries from
> tigris.org. The server is running 1.5.2. But I would not expect that
> to account for my TSVN issue since my svn 1.5.3 client can
> authenticate to the 1.5.2 server.
>
> Yes, I am trying this from the very same machine, my desktop
> computer.
>
> The $ at the end of my SVNParentPath directive is the nomenclature to
> denote a hidden Windows file share. I should note that I was able to
> open my repositories with TSVN perfectly fine prior to adding the
> directives to authenticate using the PDC. But we don't want to run
> anonymously.
>
> I am certain my computer is a member of our domain. It's required
> here.
>
> I was not expecting that I would have to enter my domain/username to
> authenticate with SSPIOmitDomain on. But it failed when I entered
> just my username so I gave it a try with domain and username and it
> worked. This is from my svn console window so it leads me to believe
> my problem is TSVN:
>
>> svn info http://vc-1/svn/myrepo
> Authentication realm: <http://vc-1:80> Subversion repositories
> Password for 'gillis_p': ******** Authentication realm:
> <http://vc-1:80> Subversion repositories Username: mydomain\gillis_p
> Password for ' mydomain\gillis_p': ******** Path: myrepo URL:
> http://vc-1/svn/myrepo Repository Root: http://vc-1/svn/myrepo
> Repository UUID: be8097fc-3112-874e-b525-a36b8ade6167 Revision: 300
> Node Kind: directory Last Changed Rev: 300 Last Changed Date:
> 2008-10-16 16:04:16 -0400 (Thu, 16 Oct 2008)
>
>
> Do you have any other suggestions? I'm stumped!

I see the problem now:
The command line client doesn't compile SSPI support, it relies on the
fallback to basic authentication for SSPI authentication. TSVN however
supports SSPI authentication (i.e., you don't even have to enter
username/password - the authentication is done by the OS and your
domain). But SSPI only works for https connections, not http connections.

So, either disable SSPI authentication and only use domain
authentication (SSPIAuthoritative Off), or enable https to your repository.

Stefan

-- 
       ___
  oo  // \\      "De Chelonian Mobile"
 (_,\/ \_/ \     TortoiseSVN
   \ \_/_\_/>    The coolest Interface to (Sub)Version Control
   /_/   \_\     http://tortoisesvn.net