[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Domain Authentication does not work

From: Stefan Küng <tortoisesvn_at_gmail.com>
Date: Fri, 21 Nov 2008 11:31:43 +0100

ITman wrote:
> Hello
>
> I'm trying to set up authentication against the Domain Controller,
> however it does not work.
>
> With AuthType Basic everything works fine, however, with Authtype SSPI
> it does not work.
>
> When I right click on a file and choose tortoisesvn, repo-browser,
> then enter the https path, i immediately get this error: Server sent
> unexpected return value (403 Forbidden) in response to OPTIONS request
> for *path*
>
> With basic auth, a popup appears at which i can enter username and
> password. With SSPI that popup does not appear, instead the above
> error message is displayed. Why the login/password window does not
> appear?
>
> What i also do not really understand is how it can authenticate
> against a domain controller without specifying the domaincontoller or
> Active directory credentials. This would basically mean that every
> tool can read information out of Active directory? Hard to belive

SSPI authentication actually was designed so that users don't have to
enter username/password anymore. That's not hard to believe. If you want
to know more about it, use Google or search the msdn website.

* check the apache error log for more information
* make sure user "GUEST" is disabled (on the server as well as on the
  domain controller)
* with SSPI, your usernames will be in form 'DOMAIN\username', not just
  'username'

Stefan

-- 
       ___
  oo  // \\      "De Chelonian Mobile"
 (_,\/ \_/ \     TortoiseSVN
   \ \_/_\_/>    The coolest Interface to (Sub)Version Control
   /_/   \_\     http://tortoisesvn.net

Received on 2008-11-21 11:31:52 CET

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.