[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

kerberos authentication using ankhsvn and tortoisesvn

From: Blaž Lorger <blaz.lorger_at_comtrade.com>
Date: Fri, 11 Jun 2010 07:48:20 +0200

Hi,

Recently I also experienced problems with SVN clients using Kerberos authentication. There are no problems with clients using svn lib 1.6.6 (Slik-Subversion-1.6.6-win32.msi, TortoiseSVN-1.6.6.17493-win32-svn-1.6.6.msi and AnkhSvn-2.1.7444.278.msi). I first started having problems with clients using svn lib 1.6.9 and this also remains true for svn lib 1.6.11 (Slik-Subversion-1.6.11-win32.msi, TortoiseSVN-1.6.8.19260-win32-svn-1.6.11.msi and AnkhSvn-2.1.8420.8.msi).

At first problem was not so bad, since authentication worked most of the time. Problems occurred only when large amount of data was exchanged between client and server. But recently Kerberos authentication failed completely. This seems to coincide with upgrade of mod_auth_kerb on corporate SVN servers. My guess is that server side change contributes to reliable problem manifestation, but basic problem is in svn library, since older SVN versions work fine.
There are also no problems when web server is accessed through regular browser (Firefox, IE).

It seems that SVN client actually sends Kerberos ticket to server once, but then "forgets" to attach same ticket on subsequent HTTP requests.

I've produced Neon trace (attachment) with Slik-Subversion, hopefully this will help to diagnose the problem. Trace was produced when following command was executed on up to date working copy:
        svn update --config-option servers:global:neon-debug-mask=1023 --config-option servers:global:http-auth-types=negotiate >trace 2>&1

First noticeable thing in trace is change in lib neon version from 0.29.0 to 0.29.3. My guess is that problem is in this library.

Blaž

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2619456

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].

Received on 2010-06-11 12:13:38 CEST

This is an archived mail posted to the TortoiseSVN Users mailing list.