> I am installing Apache and Subversion on Windows 2008 R2 and am having
> trouble making it to authenticate using Windows domain.
>
> When accessing the Subversion repository through IE 8, I am
> prompted for credential (which is expected), and after I
> entered the credential, I am getting the following error:
>
> Authorization Required
> This server could not verify that you are authorized to access the
> document requested. Either you supplied the wrong credentials
> (e.g., bad password), or your browser doesn't understand how to
> supply the credentials required.
>
> Additionally, a 404 Not Found error was encountered while
> trying to use an ErrorDocument to handle the request.
>
I had a lot of trouble getting my apache config working for IE8 in a
windoze environment. Have you tried using IE6 or a different browser.
I could login using e.g. Opera and IE6 but not IE8. It turned out to be
an issue of IE8 trying to login using a windows form of single-sign-on
(this is the way I understand it but may not be factually accurate) that
meant that IE8 authentication always failed.
Using mod_sspi to do the authentication against active directory, the
magic settings ended up as:
<Location />
Require valid-user
AuthType SSPI
AuthName "<text to display in login dialog>"
SSPIAuth On
SSPIAuthoritative On
SSPIDomain <active directory domain>
# OmitDomain _should_ strip the domain from the username for us
SSPIOmitDomain On
SSPIOfferSSPI Off
SSPIOfferBasic On
SSPIBasicPreferred On
</Location>
...especially the last three lines. These cause IE8 not to try to be
clever and use the basic route that actually works. However, using
BASIC auth means you really need to use SSL as your username/password is
send in plain text across the network...
Now it is working I really like mod_auth_sspi but it is currently
without developers and the documentation is very lacking, a lot of
google time was required to get it working with IE8. You should be able
to find it at http://mod-auth-sspi.sf.net/ but it seems to be
unavailable at the moment...
I hope this helps,
~ Mark C
Received on 2010-03-25 14:13:57 CET