[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Client authentication with Kerberos ticket

From: Yves Martin <yves.martin_at_elca.ch>
Date: 2006-12-21 14:18:40 CET

> For the moment, I configure https to get ticket authentication,
> but I'm afraid of performance.

 Server configuration is over.
 . IE is authenticated properly with SPNEGO
 . svn Linux client also (after klist and kvno)

 If I use the svn win32 client 1.3.2 - it works with tickets !
 My Linux server uses svn 1.3.2 too.

 . TurtoiseSVN 1.4.1 simply crashes !
 . svn Win32 1.4.2 command line also crashes ?

 And the Apache2 access log is OK: IP, user, action, path, svn 1.4.2 - yma@ELCA.CH [21/Dec/2006:14:03:20 +0100]
"PROPFIND /subversion/PROJ/trunk HTTP/1.1" 207 720 "-" "SVN/1.4.2 (r22
196) neon/0.26.1"

 So that is not a server or kerberos issue...

[Thu Dec 21 14:03:20 2006] [debug] src/mod_auth_kerb.c(1023): [client] Acquiring creds for HTTP/srv11590.elca.ch@ELCA.CH
[Thu Dec 21 14:03:20 2006] [debug] src/mod_auth_kerb.c(1152): [client] Verifying client data using SPNEGO GSS-API
[Thu Dec 21 14:03:20 2006] [debug] src/mod_auth_kerb.c(1168): [client] Verification returned code 0
[Thu Dec 21 14:03:20 2006] [debug] src/mod_auth_kerb.c(1186): [client] GSS-API token of length 0 bytes will be sent back

[Thu Dec 21 14:03:27 2006]
[debug] /home/skx/apache2-2.0.54/build-tree/apache2/modules/ssl/ssl_engine_io.c(1522): OpenSSL: I/O error, 5
bytes expected to read on BIO#894d988 [mem: 89a2af0]
[Thu Dec 21 14:03:27 2006] [info] (104)Connection reset by peer: SSL
input filter read failed.

 What may be wrong now with TurtoiseSVN 1.4.1 on Windows 2000 SP 4 ?
 I have submitted the crash report...

 Thank you in advance for your help

Yves Martin
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Thu Dec 21 14:19:41 2006

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.