Re: linux subversion client with Kerberos

I have set Apache + mod_auth_kerb + DAV, this works fine and without
password from a browser (both IE and firefox), but it looks as though svn
client is not forwarding the ticket ; when I look at the apache log (with
loglevel = debug), I get:

[Mon Jul 28 15:48:57 2008] [debug] src/mod_auth_kerb.c(1432): [client
123.45.678.912] kerb_authenticate_user entered with user (NULL) and
auth_type Kerberos

Note the user: NULL.

I'll try with password on today, but it kind of defeats the purpose of
kerberos/AD, forcing the users to now enter a password (they already did
when they logged in in Windows or kinit on UNIX).

Nick.Thompson_at_infineon.com wrote:
> Steve
>
>
>
> You *might* have better luck with KrbMethodNegotiate Off and possibly
> KrbMethodK5Passwd on. You might not, but it works for me :-)
>
>
>
> Nick,
>
>
>
> ------------------------------------------------------------------------
>
> *From:* Steve Zeng [mailto:SteveZ_at_airg.com]
> *Sent:* Monday, July 21, 2008 10:09 PM
> *To:* users_at_subversion.tigris.org
> *Subject:* linux subversion client with Kerberos
>
>
>
> Hello forks,
>
>
>
> Basically I am looking for a linux subversion client which can do
> Kerberos authentication with Windows Active Directory. I’ve search the
> mail list archive and could not find one. Any help would be highly
> appreciated.
>
>
>
> My SVN server is configured as Apache/Kerberos authentication. Currently
> I’ve successfully got Windows SVN client working.
>
>
>
> <Location /svn>
>
> DAV svn
>
> SVNParentPath /var/www/svn/
>
> AuthzSVNAccessFile /var/www/svn/repos/conf/authz
>
> SSLRequireSSL
>
>
>
> AuthType Kerberos
>
> AuthName "Kerberos Login"
>
> KrbMethodNegotiate On
>
> KrbMethodK5Passwd Off
>
> KrbAuthRealms EXAMPLE.COM
>
> require valid-user
>
> </Location>
>
>
>
> Below is version of my SVN server and windows client.
>
> 1) subversion server
>
> centos 5.1 i386
>
> subversion-1.4.2
>
> httpd-2.2.3-11
>
> mod_auth_kerb-5.1
>
>
>
> 2) Windows Client (working)
>
> Windows XP SP3
>
> TortoiseSVN 1.4.0, Build 7501 - 32 Bit , 2006/09/15 21:34:55
>
> Subversion 1.4.0,
>
> apr 0.9.12
>
> apr-iconv 0.9.7
>
> apr-utils 0.9.12
>
> berkeley db 4.4.20
>
> neon 0.25.5
>
> OpenSSL 0.9.8b 04 May 2006
>
>
>
>
>
> Best Regards,
>
> ---------------------
>
> Steve Zeng
>

-- 
Yves.
http://www.SollerS.ca
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org