[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Tortoise 1.8 hangs, 1.7 works when using GSSAPI auth

From: <Wolfgang.Friebel_at_desy.de>
Date: Wed, 23 Oct 2013 15:52:21 +0200 (CEST)

We have a lot of users accessing their repositories from Windows using
TortoiseSVN. The access is done using https, the server is a Linux box running
Apache and has GSSAPI auth configured.

Everything was running smoothly when using TSVN 1.7. With the 1.8 version using
GSSAPI auth the client simply hangs forever. Using simple auth or certificate
based auth is however not affected.

When I try to checkout (using https, GSSAPI auth) a fresh copy from a repo on
my home computer running Windows7 and TSVN 1.8.2 I do get the following log
entries on the remote SVN (apache) server:

ssl_access_log:84.189.252.139 - - [21/Oct/2013:18:24:59 +0200] "OPTIONS
/desy/afsbackup HTTP/1.1" 401 492
ssl_request_log:[21/Oct/2013:18:25:00 +0200] 84.189.252.139 TLSv1
DHE-RSA-AES256-SHA "OPTIONS /desy/afsbackup HTTP/1.1" 492

and no lines in the ssl_error log for that period in time

It has certainly to do with the change from the neon to the serf libraries, but
I have no idea what goes wrong and how to fix it. Having read that a bug has
fixed on Sep 16 which seems to very well reflect our observations I was also
trying the latest nightly build as of yesterday, but no change in behaviour.

I played both with the Network Identity Manager and the Windows Credentials
Manager to convince TSVN to use the proper identity but again without success.

On our kdc I do see the krbtgt ticket granting ticket request when I tried to
obtain a TGT using the Network Identity Manager but no request for the
HTTP/hostname_at_REALM service ticket at all. To me it looks like TSVN does not
try to request that service ticket (maybe as it does not know where the TGT is
stored?).

Looking through the recent entries in the mail archive several people seem to
have the same or similar problems, but I did not see a solution that would work
for us.

-- 
Best regards
Wolfgang Friebel                   Deutsches Elektronen-Synchrotron DESY
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=3066900
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2013-10-23 16:00:21 CEST

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.