[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Help: Apache2, Kerberos, AD, caching authentication?

From: Lieven Govaerts <svnlgo_at_mobsol.be>
Date: Mon, 21 Sep 2009 17:48:26 +0200

On Wed, Sep 16, 2009 at 8:15 PM, Hoffman, Derek A.
<Derek.Hoffman_at_benham.com> wrote:
> Background: My server is using Kerberos to authenticate users against an
> Active Directory server. Our typical repository contains 50 to 200 mix
> format files (e.g. word docs, excel, visio, bitmaps, text files, etc.).
> Issue: There's a substantial delay when checking out, committing, or
> updating. I believe Apache is doing a Kerberos authentication for EVERY
> file within the repo when doing a checkout or commit.

HTTP SPNEGO/Kerberos is connection-based, so for new each connection
from the svn client to the apache server, the mutual authentication is
only done once. So, since svn doesn't open a connection per file,
there's no kerberos authentication per file either.



To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-09-21 17:49:31 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.