[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

LDAP authentication is very slow

From: Subversion <Subversion_at_sensor-technik.de>
Date: 2006-04-04 08:41:26 CEST

Hello all

I'm hitting a strange problem, when I try to authenticate a user with
apache against a LDAP server...
But I think it's the best to start with my configuration:
I use subversion 1.3.0 for Win32 and Apache 2.0.55 with the LDAP module
from http://muquit.com/ (mm_auth_ldap_module).

my configuration looks like:

<Location /svn/repo/>
     DAV svn
     SVNParentPath path/to/repo
     SVNListParentPath On
     AuthUserFile "path/to/access.conf"
     SVNIndexXSLT "/svnindex.xsl"
     AuthName "Subversion Repository"
     AuthType Basic
     LDAP_Server server
     LDAP_Port 389
     Bind_Tries 5
     LDAP_Protocol_Version 3
     Base_DN "cn=Users,dc=domain,dc=local"
     Bind_DN "cn=xxxxxx,cn=Users,dc=domain,dc=local"
     Bind_Pass "xxxxxx"
     UID_Attr sAMAccountName
     LDAP_Debug On
     require valid-user
</Location>

Now to the problem:
When I try to connect to the repository with firefox everything works
fine, but every time I try to connect with "svn ls http://server/repo"
it takes up to 30 Seconds till the command returns with a result.

I traced the network traffic with ethereal and every time the user was
authenticated and authorized by the LDAP server, the svn client sends a
new authentication request. Then in this loop it hangs for about 30
seconds (produces some network traffic) and came back with a "user
authorized" at last.

If the user is not authorized to access the repository an error returns
immediately.

I don't know if it's really a subversion issue, but because a user can
authenticate with the web browser immediately I suppose so. Maybe
someone had the same problems and found a solution for it.

Regards

Christoph

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Tue Apr 4 08:42:28 2006

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.