[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: Getting NT Authorization Right with mod_auth_sspi.so

From: Roehl, Dan <Dan.Roehl_at_austinenergy.com>
Date: 2004-07-13 16:42:31 CEST

I went ahead and grabbed the mod_auth_sspi mod; Still no dice.
It still looks like Apache is unable to authenticate and placing the
Directive SSPIOmitDomain On in the conf file still hoses Apache.

Error messages are still
[Tue Jul 13 09:40:34 2004] [error] [client 10.10.58.134] (OS 1312)A
specified logon session does not exist. It may already have been terminated.
: user roehld: authentication failure for "/svn/repos/app"
[Tue Jul 13 09:40:44 2004] [error] [client 10.10.58.134] Access denied:
'myDomain\\roehld' PROPFIND /app

I am at a total loss.

-----Original Message-----
From: Toby Johnson [mailto:toby@etjohnson.us]
Sent: Monday, July 12, 2004 6:08 PM
To: 'users@subversion.tigris.org'
Subject: Re: Getting NT Authorization Right with mod_auth_sspi.so

Roehl, Dan wrote:

>In my http.conf
>
>Where
>SSPIDomain <value>
>What should <value> be?
>I have tried:
>- The fully qual name of the domain controller itself
>- ip address of the controller
>- myDomain.net
>- myDomain
>
>
I use only "myDomain", i.e. the part you see before the backslash when
logged in and you hit CTRL+ALT+DEL.

>None seem to work. Also placing the directive
>SSPIOmitDomain on
>In httpd hoses the service completely (won't even start).
>
>
Use the version of the SSPI module from this website:
http://www.deadbeef.com/software/sspi.html and try the "SSPIOmitDomain
On" again. Then get rid of the domain\ in your AuthZ file, leaving only
the username. You don't want that ugly "domain\user" in all your
logfiles anyway!

The password special char problem only happened to me with the Unix
client on HP-UX; I've never had problems on Windows so it's probably
something particular to that platform.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Tue Jul 13 16:44:27 2004

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.