[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: have any one tried SSPI with Subversion 1.5 ?

From: Alec Kloss <alec.kloss_at_oracle.com>
Date: Fri, 29 Aug 2008 06:53:36 -0500

On 2008-08-29 15:46, vishwajeet singh wrote:
> http://tortoisesvn.net/docs/release/TortoiseSVN_en/tsvn-serversetup.html#tsvn-serversetup-apache-5
> This document says that you can have sspi authentication with SSL
> connections only.
> Can any one confirm this??
> I am presently using 1.4.6 and using sspi authentication which is working
> fine both for ssl and non ssl connections.

You're probably really asking about Negotiate/SPNEGO with Neon
linked against Microsoft's SSPI library. As I recall, it's
considered unsafe to use Negotiate/SPNEGO without SSL as it's
lacking either mutual authentication or man-in-the-middle
protection. Neon therefore won't do Negotiate unless you are also
doing SSL. I just confirmed this with Tortoise 1.5.2 and a
pre-built command line svn 1.5.1 client.

Alec.Kloss_at_oracle.com			Oracle Middleware
PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x432B9956

  • application/pgp-signature attachment: stored
Received on 2008-08-29 13:54:05 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.