On 6/23/06, Ahmed Reza <ahmedrezat@gmail.com> wrote:
> Hello all, Looked at this long and hard, thought about it for quite a while
> too, but it just doesn't make sense to me. Ok, so I have a subversion
> server running Apache 2.0.55 and SSPI 1.0.4. Now everything works fine when
> I'm logged in to my windows machine here at work. I can checkout, check-in,
> Tag/Branch etc etc. Now, one of my coworkers complained about PROPFIND
> errors and MKACTIVITY errors. Here comes the realy wierd part. If I have
> my co-worker log into my machine and do a branching/tagging operation on a
> subversion repo, he gets an error. Even when I authenticate with the SVN
> server with my account name and password, it still fails. It lets you check
> out and authenticates with SSPI just fine! If my co-worker logs off and I
> log-in to my machine and we try the exact same operation, everything works
> flawlessly with (both his and my log-in ids when dealing with subversion)!
> Below is the apache configuration on a repository:
>
> BEFORE:
>
> <Location "/Software/Testing">
> DAV svn
> SVNListParentPath on
> SVNParentPath E:\Software\Testing
> SVNPathAuthz off
> AuthType SSPI
> SSPIAuth On
> SSPIAuthoritative On
> SSPIDomain SC2K3PDC
> SSPIOfferBasic on
> AuthzSVNAccessFile svnaccessfile
> Require valid-user
> </Location>
>
> We figured out that by commenting out the "AuthzSVNAccessFile" line we
> eliminated the MKActivity & Propfind errors, althought we no longer have any
> real access control. Here's what it looks like now:
>
> <Location "/Software/Testing">
> DAV svn
> SVNListParentPath on
> SVNParentPath E:\Software\Testing
> SVNPathAuthz off
> AuthType SSPI
> SSPIAuth On
> SSPIAuthoritative On
> SSPIDomain SC2K3PDC
> SSPIOfferBasic on
> # AuthzSVNAccessFile svnaccessfile
> Require valid-user
> </Location>
>
> This is really weird since you can go thru the authentication just fine and
> checkout/checkin your work but just on certain operations, there are
> MKActivity & Propfind errors; and only when a certain user is logged into
> windows with his accountname, if he uses my acccountname in windows, and
> then accesses the server and provides his own security credentials,
> everything works! Has anybody seen anything like this? What the heck! Any
> input would be deeply appreciated!
>
> Regards,
> Ahmed
>
If no one else here can help, you might try asking over on the TSVN
list -- they probably have more users with experience on the SSPI auth
features.
DJ
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Jun 23 16:51:44 2006