Re: svnserve authenticating against Windows domain credentials

On Fri, May 2, 2008 at 10:04 AM, Scott Palmer <Scott_at_digital-rapids.com> wrote:
> Where do the docs state that LDAP and Kerberos aren't supported on
> Windows?

http://www.sendmail.org/~ca/email/cyrus2/windows.html

> The docs for SASL are such a complete mess that I admit I
> could hardly follow anything in them.
> Regardless.. if I have to resport to NTLM it should do the trick..
> otherwise why include it at all?

NTLM is not what you think it is. It has nothing to do with
authenticating against your Windows usernames. NTLM is an
authentication mechanism, like CRAM-MD5. In other words, it is a
specific way of doing a challenge/response.

http://en.wikipedia.org/wiki/NTLM

NTLM support in SASL is also not recommended (because DIGEST-MD5 is
better). Anyway, the point is that NTLM does not address the need to
authenticate using your Windows usernames.

The ironic thing here, is that a Linux server can be relatively easily
configured to use LDAP against your Active Directory.

-- 
Thanks
Mark Phippard
http://markphip.blogspot.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org