[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: linux subversion client with Kerberos

From: <Nick.Thompson_at_infineon.com>
Date: Wed, 23 Jul 2008 14:16:46 +0200


Yes, they do need their password the first time they connect, but as you say it is cached (with the username) for future use. This cache file is set as read/write to user only, so only root (and possibly sudo's) can read the contents.

As far as I know, SVN client on Unix/Linux only supports basic auth with http/https, so I don't see any other option at this time.


From: Steve Zeng [mailto:SteveZ_at_airg.com]
Sent: Tuesday, July 22, 2008 5:25 PM
To: Thompson Nick (IFGB COM PS CE PLSA CA); users_at_subversion.tigris.org
Subject: RE: linux subversion client with Kerberos


Thanks. Do people need to enter password to establish SVN connection in your case? Plus, SVN will cache the passwords. It is a security concern.


From: Nick.Thompson_at_infineon.com [mailto:Nick.Thompson_at_infineon.com]
Sent: July 22, 2008 4:57 AM
To: Steve Zeng; users_at_subversion.tigris.org
Subject: RE: linux subversion client with Kerberos


You *might* have better luck with KrbMethodNegotiate Off and possibly KrbMethodK5Passwd on. You might not, but it works for me :-)


From: Steve Zeng [mailto:SteveZ_at_airg.com]
Sent: Monday, July 21, 2008 10:09 PM
To: users_at_subversion.tigris.org
Subject: linux subversion client with Kerberos

Hello forks,

Basically I am looking for a linux subversion client which can do Kerberos authentication with Windows Active Directory. I've search the mail list archive and could not find one. Any help would be highly appreciated.

My SVN server is configured as Apache/Kerberos authentication. Currently I've successfully got Windows SVN client working.

<Location /svn>
   DAV svn
   SVNParentPath /var/www/svn/
   AuthzSVNAccessFile /var/www/svn/repos/conf/authz

          AuthType Kerberos
          AuthName "Kerberos Login"
          KrbMethodNegotiate On
          KrbMethodK5Passwd Off
          KrbAuthRealms EXAMPLE.COM
          require valid-user

Below is version of my SVN server and windows client.
1) subversion server
centos 5.1 i386

2) Windows Client (working)
Windows XP SP3
TortoiseSVN 1.4.0, Build 7501 - 32 Bit , 2006/09/15 21:34:55
Subversion 1.4.0,
apr 0.9.12
apr-iconv 0.9.7
apr-utils 0.9.12
berkeley db 4.4.20
neon 0.25.5
OpenSSL 0.9.8b 04 May 2006

Best Regards,
Steve Zeng
Received on 2008-07-23 14:17:23 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.