[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

SVN, Apache, and SSPI

From: Stephen Berard <srberard_at_hotmail.com>
Date: 2004-03-24 17:59:46 CET

I'm trying to get our SubVersion server setup to authenticate users via our
Windows Domain. I’ve managed to get it working for some (namely myself) but
not for all users. I have SVN 1.0.0 with Apache and the mod_SSPI module
(configuration is listed below). When a user performs and operation via the
SVN client it prompts for the username and password. It then proceeds
through its operation for a while. Then it prompts for credentials again.
Eventually this cycle causes the Windows DC to lock out the account due to
repeated auth failures and all further operations fail.

Upon examining the logfiles for Apache I seem to have located what is going
on. Apparently, the username is passed correctly sometimes while other
times it is just blank. I’ve attached the logs below. You can see that the
user “DOMAIN\autobuild” completed a number of actions but the username is
blank on others. The weird thing is that the Access.log has a blank
username but the Error.log file does not. Does anyone have an idea as to
how to correct this?

Cheers,
Stephen

Httpd.cond:
<Location /repos>
        DAV svn
        SVNParentPath "C:\SVNROOT"
        SVNIndexXSLT "/svnindex.xsl"

        AuthType SSPI
        AuthName "SubVersion Respositories"
        Require group "DOMAIN\SVN Users"

        SSPIAuth On
        SSPIAuthoritative On
        SSPIDomain AMS
        SSPIOfferBasic On

        AuthzSVNAccessFile C:\SVNROOT\.svnaccess
</Location>

.svnaccess:
[/]
* = rw

[/Tags]
* = r
DOMAIN\Admin = rw

Access.log:
X.X.X.X- - [24/Mar/2004:10:13:57 -0500] "PROPFIND
/repos/TestRepository/Trunk HTTP/1.1" 401 511

X.X.X.X- DOMAIN\\autobuild [24/Mar/2004:10:13:57 -0500] "PROPFIND
/repos/TestRepository/Trunk HTTP/1.1" 207 462
X.X.X.X- DOMAIN\\autobuild [24/Mar/2004:10:13:57 -0500] "PROPFIND
/repos/TestRepository/!svn/vcc/default HTTP/1.1" 207 422
X.X.X.X- DOMAIN\\autobuild [24/Mar/2004:10:13:57 -0500] "CHECKOUT
/repos/TestRepository/!svn/bln/8 HTTP/1.1" 201 363
X.X.X.X- DOMAIN\\autobuild [24/Mar/2004:10:13:58 -0500] "PROPPATCH
/repos/TestRepository/!svn/wbl/749466cf-4a69-9d43-b03e-58de5697f373/8
HTTP/1.1" 207 365
X.X.X.X- DOMAIN\\autobuild [24/Mar/2004:10:13:58 -0500] "PROPFIND
/repos/TestRepository/Trunk HTTP/1.1" 207 418
X.X.X.X- DOMAIN\\autobuild [24/Mar/2004:10:13:58 -0500] "CHECKOUT
/repos/TestRepository/!svn/ver/8/Trunk HTTP/1.1" 201 367
X.X.X.X- DOMAIN\\autobuild [24/Mar/2004:10:13:58 -0500] "MKCOL
/repos/TestRepository/!svn/wrk/749466cf-4a69-9d43-b03e-58de5697f373/Trunk/Test3
HTTP/1.1" 201 363
X.X.X.X- DOMAIN\\autobuild [24/Mar/2004:10:13:58 -0500] "PUT
/repos/TestRepository/!svn/wrk/749466cf-4a69-9d43-b03e-58de5697f373/Trunk/Test3/SourceFile1.txt
HTTP/1.1" 201 376
X.X.X.X- DOMAIN\\autobuild [24/Mar/2004:10:13:59 -0500] "PROPPATCH
/repos/TestRepository/!svn/wrk/749466cf-4a69-9d43-b03e-58de5697f373/Trunk/Test3/SourceFile2.txt
HTTP/1.1" 207 503
X.X.X.X- DOMAIN\\autobuild [24/Mar/2004:10:13:59 -0500] "PUT
/repos/TestRepository/!svn/wrk/749466cf-4a69-9d43-b03e-58de5697f373/Trunk/Test3/SourceFile3.txt
HTTP/1.1" 201 381

X.X.X.X- DOMAIN\\autobuild [24/Mar/2004:10:14:03 -0500] "PUT
/repos/TestRepository/!svn/wrk/749466cf-4a69-9d43-b03e-58de5697f373/Trunk/Test3/File.txt
HTTP/1.1" 201 376
X.X.X.X- - [24/Mar/2004:10:14:03 -0500] "PROPPATCH
/repos/TestRepository/!svn/wrk/749466cf-4a69-9d43-b03e-58de5697f373/Trunk/Test3/File.txt
HTTP/1.1" 401 511
X.X.X.X- - [24/Mar/2004:10:14:03 -0500] "PROPPATCH
/repos/TestRepository/!svn/wrk/749466cf-4a69-9d43-b03e-58de5697f373/Trunk/Test3/File.txt
HTTP/1.1" 401 511
X.X.X.X- - [24/Mar/2004:10:14:03 -0500] "PROPPATCH
/repos/TestRepository/!svn/wrk/749466cf-4a69-9d43-b03e-58de5697f373/Trunk/Test3/File.txt
HTTP/1.1" 401 511
X.X.X.X- - [24/Mar/2004:10:14:03 -0500] "PROPPATCH
/repos/TestRepository/!svn/wrk/749466cf-4a69-9d43-b03e-58de5697f373/Trunk/Test3/File.txt
HTTP/1.1" 401 511

Error.log:
[Wed Mar 24 10:13:57 2004] [error] [client X.X.X.X] (OS 1326)Logon failure:
unknown user name or bad password. : user DOMAIN\autobuild: authentication
failure for "/repos/TestRepository/Trunk"

[Wed Mar 24 10:14:03 2004] [error] [client X.X.X.X] (OS 1326)Logon failure:
unknown user name or bad password. : user DOMAIN\autobuild: authentication
failure for
"/repos/TestRepository/!svn/wrk/749466cf-4a69-9d43-b03e-58de5697f373/Trunk/Test3/File.txt"
[Wed Mar 24 10:14:03 2004] [error] [client X.X.X.X] (OS 1326)Logon failure:
unknown user name or bad password. : user DOMAIN\autobuild: authentication
failure for
"/repos/TestRepository/!svn/wrk/749466cf-4a69-9d43-b03e-58de5697f373/Trunk/Test3/File.txt"
[Wed Mar 24 10:14:03 2004] [error] [client X.X.X.X] (OS 1326)Logon failure:
unknown user name or bad password. : user DOMAIN\autobuild: authentication
failure for
"/repos/TestRepository/!svn/wrk/749466cf-4a69-9d43-b03e-58de5697f373/Trunk/Test3/File.txt"
[Wed Mar 24 10:14:03 2004] [error] [client X.X.X.X] (OS 1326)Logon failure:
unknown user name or bad password. : user DOMAIN\autobuild: authentication
failure for
"/repos/TestRepository/!svn/wrk/749466cf-4a69-9d43-b03e-58de5697f373/Trunk/Test3/File.txt"

_________________________________________________________________
Find a broadband plan that fits. Great local deals on high-speed Internet
access.
https://broadband.msn.com/?pgmarket=en-us/go/onm00200360ave/direct/01/

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Mar 24 18:00:37 2004

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.