[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Help: Apache2, Kerberos, AD, caching authentication?

From: Hoffman, Derek A. <Derek.Hoffman_at_benham.com>
Date: Wed, 16 Sep 2009 13:15:49 -0500

Background: My server is using Kerberos to authenticate users against an
Active Directory server. Our typical repository contains 50 to 200 mix
format files (e.g. word docs, excel, visio, bitmaps, text files, etc.).

Issue: There's a substantial delay when checking out, committing, or
updating. I believe Apache is doing a Kerberos authentication for EVERY
file within the repo when doing a checkout or commit. Netstat on the svn
server shows a large number of connections to the AD Server in the
WAITING state. There is a slight delay (maybe 0.5s) for Kerberos
authentication (svn server is in a separate city from the AD server and
must traverse corporate WAN).

Question: Is there any sort of method that would allow the apache server
to cache these Kerberos authentications so that it wouldn't have to
perform an authentication request for every file?

Regards,
Derek.

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2395673

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-09-16 20:25:32 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.