[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

gssapi against AD server ?

From: Yves Dorfsman <yves_at_zioup.com>
Date: Tue, 08 Jul 2008 23:18:51 -0600

Hi,

Can you use GSSAPI authentication with svn 1.5 against a Microsoft AD
server ?

I do this with CVS without problem, but ran into a problem with subversion,
and would like to know if there are known issues with this before I dig into
it further.

In http://svn.collab.net/repos/svn/trunk/notes/sasl.txt it says:

"Cyrus's GSSAPI implementation does not support encryption, except for very
basic 56-bit DES. If you leave the encrypt settings out of your
svnserve.conf entirely, you're fine; just don't set max-encryption higher
than 56."

Could this prevent authentication against AD ?
Has anybody done this before ?

I am getting the following error:
svn: Commit failed (details follow):
svn: Authentication error from server: SASL(-13): authentication
failure: GSSAPI Failure: gss_accept_sec_context

klist shows me the tgt from my kinit + the the ticket for svn from the svn
server, so that seems good.

Thanks.

-- 
Yves.
http://www.SollerS.ca
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org
Received on 2008-07-09 07:19:13 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.