[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: svnserve, sasl and windows authentication

From: Matthew Richardson <M.Richardson_at_ed.ac.uk>
Date: Mon, 08 Sep 2008 09:35:08 +0100

> So, if you're willing to do https:// and use SSPI for windows
> login, and you can set up mod_auth_kerb, you've got nice
> single-sign-on for windows. With a bit of work, you can do GSSAPI
> over svnserve (with MIT Kerberos) and get SSO for Windows domain
> users as well. Doing GSSAPI with SSPI would require someone to
> write some real code in Cyrus SASL. Maybe someone already has, but
> I haven't noticed it.

Note that the 3rd option, using https:// with apache and mod_auth_krb
and using GSSAPI rather than SSPI isn't yet possible. That is, you can
only use the kerberos ticket you get from a domain login, you can't use
MIT Kerberos client to provide your ticket).

I've been pushing for this in any one of TortoiseSVN, Svn or the neon
libraries, but no joy so far...


Received on 2008-09-08 10:35:10 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.