Re: Help: Apache2, Kerberos, AD, caching authentication?

On Wed, Sep 16, 2009 at 8:15 PM, Hoffman, Derek A.
<Derek.Hoffman_at_benham.com> wrote:
> Background: My server is using Kerberos to authenticate users against an
> Active Directory server. Our typical repository contains 50 to 200 mix
> format files (e.g. word docs, excel, visio, bitmaps, text files, etc.).
>
> Issue: There's a substantial delay when checking out, committing, or
> updating. I believe Apache is doing a Kerberos authentication for EVERY
> file within the repo when doing a checkout or commit.

HTTP SPNEGO/Kerberos is connection-based, so for new each connection
from the svn client to the apache server, the mutual authentication is
only done once. So, since svn doesn't open a connection per file,
there's no kerberos authentication per file either.

Lieven

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2397511

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-09-21 17:49:31 CEST