[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Using MIT kerberos authentication with Tortoise SVN from a windows client

From: Chris Rodgers <rodgers_at_physchem.ox.ac.uk>
Date: 2006-08-25 12:35:09 CEST

Samay wrote:
> not till its Tortoise 1.4.x ... as in earlier versions they specifically
> disable GSSAPI auth. If you find a way, do share, as im stuck in similar
> boat albeit, Windows KDC.

I have in fact been testing with Tortoise 1.4.x, but it doesn't seem to
want to work. In case anyone else has any ideas, here are the software
versions that I am using for my tests:

On the Windows client (not working):

Windows 2000 SP4 (which is not joined to a domain)

TortoiseSVN 1.4.0, Build 7195 - 32 Bit -RC1, 2006/08/05 14:31:55
Subversion 1.4.0, -dev
apr 0.9.12
apr-iconv 0.9.7
apr-utils 0.9.12
berkeley db 4.4.20
neon 0.25.5
OpenSSL 0.9.8b 04 May 2006
zlib 1.2.3

MIT Kerberos for Windows 3.1.0 beta 1 with Network Identity Manager 1.1.0.1.

On the Linux client (working fine):

Fedora Core 5 (Linux xxxx.yyyyy 2.6.17-1.2174_FC5smp #1 SMP Tue Aug 8
16:00:39 EDT 2006 i686 i686 i386 GNU/Linux)

krb5-workstation-1.4.3-5.1
subversion-1.3.2-2.1

On the Linux webserver and KDC:

Fedora Core 5 (Linux xxxx.yyyyy 2.6.17-1.2174_FC5 #1 Tue Aug 8 15:30:55
EDT 2006 i686 i686 i386 GNU/Linux)

krb5-workstation-1.4.3-5.1
krb5-libs-1.4.3-5.1
krb5-auth-dialog-0.6.cvs20060212-1
krb5-server-1.4.3-5.1
krb5-devel-1.4.3-5.1
httpd-2.2.2-1.2
mod_auth_kerb-5.0-8.2.1
mod_ssl-2.2.2-1.2
mod_dav_svn-1.3.2-2.1
subversion-devel-1.3.2-2.1
subversion-1.3.2-2.1

My httpd.conf file contains

<Location /svn>
    DAV svn
    SVNParentPath /var/www/svn

    AuthzSVNAccessFile /var/www/svn-acl

    SSLRequireSSL

    AuthType Kerberos
    AuthName "Kerberos Login"
    KrbMethodNegotiate On
    KrbMethodK5Passwd Off
    KrbAuthRealms MY.REALM
    KrbVerifyKDC off
    Krb5KeyTab /etc/httpd/conf.d/keytab

    Require valid-user
</Location>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Aug 25 12:36:46 2006

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.