[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: neon, SSPI, and mod_auth_kerb

From: Samay <getafix123_at_hotmail.com>
Date: 2005-07-20 18:24:35 CEST

> Sorry for the cross-post / reply to self, but I figured out how to get
> subversion to do single sign on / kerberos auth on windows against
> mod_auth_kerb on linux, and maybe this will prevent someone else from
> having to spend an entire day on it.
> --On Thursday, July 14, 2005 7:56 PM -0500 Christopher Mason
> <Mason.Christopher@mayo.edu> wrote:
>> [Thu Jul 14 16:37:27 2005] [error] [client]
>> gss_accept_sec_context() failed: Miscellaneous failure (Request is
>> a replay)
> It turns out this is a replay cache issue in mod_auth_kerb 5.0rc4 (the
> version that's in Fedora Core 3) that's fixed in rc6. I'm not sure what
> IE does differently from neon that doesn't tickle it, but anyway...

Above specific error ("request is a replay") re-surfaces with Apache
2.0.54-r12, mod_auth_kerb 5.0_rc6 & mit-krb5 1.4.1. I tested it on a Gentoo
server against Microsoft Win2k Active Directory. Downgrading to mit-krb5
1.3.6-r3 seems to fix the issue.

Not sure if its Gentoo specific.


To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Jul 20 18:26:23 2005

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.