[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

http-auth-type negotiate broken after upgrade

From: Graeme Hodgson <graeme.hodgson_at_wandisco.com>
Date: Fri, 20 Jul 2012 12:27:05 +0100

From a customer:

"I'm working on both the upgrade from 1.6 to 1.7 and passing through
Windows credentials so our developers won't have to manually enter a
username/password. On TortoiseSVN 1.6.16, I found the registry setting to
enable negotiate as an http-auth-type even when connecting over unencrypted
http (specifically, adding a group under
HKCU\Software\Tigris.org\Subversion\servers and explicitly allowing
negotiate for it). When I upgraded to Tortoise 1.7.4, however, this stopped
working.

Using WireShark, I saw that the initial response from the server would be
exactly the same (401 Unauthorized), but where 1.6 would immediately send
back a Authorization: Negotiate header, 1.7 never seems to try that method.
Eventually, I found that I could work around this by specifying serf as the
http-library, but I figured (1) we'd like to stay as close to stock
TortoiseSVN as possible, for ease of maintenance, and (2) you probably want
to fix the interaction with neon regardless.

Both TortoiseSVN clients were standard downloads; the only special
configuration (beyond the aforementioned server grouping) is to specify a
different diff tool and some global ignores. I saw that both clients were
using neon 0.29.6; 1.6 is using serf 0.7.2, while 1.7 is using serf 1.0.1.
Any ideas what's going on there, or what it would take to fix it so we
could use the default library?"

Any ideas would be greatly appreciated.
TIA.

-- 
Regards,
Graeme Hodgson
Technical Support Engineer
WANdisco plc.
Office: +44.(0)114.303 9985 X733
   Cell: +44.(0).798.218.1852
   Fax: +1.866.247.7584
http://www.wandisco.com
uberSVN: Subversion Made Easy
http://www.uberSVN.com
Everything you need to deploy Subversion in the Enterprise
http://www.wandisco.com/subversion
Subversion community
http://www.svnforum.org
Read our blogs
http://blogs.wandisco.com/
Follow us on Twitter
http://www.twitter.com/wandisco
THIS MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL, PROPRIETARY, AND
MAY BE PRIVILEGED.  If this message was misdirected, WANdisco plc
and its subsidiaries, ("WANdisco") does not waive any confidentiality
or privilege.  If you are not the intended recipient, please notify us
immediately and destroy the message without disclosing its contents to
anyone.  Any distribution, use or copying of this e-mail or the
information it contains by other than an intended recipient is
unauthorized.  The views and opinions expressed in this e-mail message
are the author's own and may not reflect the views and opinions of
WANdisco, unless the author is authorized by WANdisco to express such
views or opinions on its behalf.  All email sent to or from this
address is subject to electronic storage and review by WANdisco.
Although WANdisco operates anti-virus programs, it does not accept
responsibility for any damage whatsoever caused by viruses being
passed.
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2991945
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2012-07-20 13:39:25 CEST

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.