[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Problem with SVN + Sasl2 + Auxprop + Sasldb

From: Nick Williams <nicholas_at_nicholaswilliams.net>
Date: Tue, 8 Feb 2011 09:26:19 -0600

I sent this email Saturday in hopes of getting some help from someone with more knowledge and experience than I have. However, I never heard anything back from anyone. Because I'm new to the list, can somebody confirm that my messages are, indeed, getting to the list? And does anyone have any ideas?

Thanks!

Nick

On Feb 5, 2011, at 11:34 AM, Nick Williams wrote:

> I'm new to administrating SVN, but I have read about half (the most relevant sections) of "Version Control with Subversion" from svnbook.red-bean.com. I spent about 3-4 hours Googling this problem, but I found nothing that was able to help me move forward with my new SVN server.
>
> Here's my setup:
>
> OpenSUSE Linux 10.3
> SVN 1.6.15 (r1038135)
> Sasl version 2.1.22 by "Cyrus SASL"
>
> Here's my configuration (I'm logged in as root for all of this):
>
> $ ls -l /svn/repos/conf/
> total 12
> -rw-r--r-- 1 root root 1080 2011-02-03 11:08 authz
> -rw-r--r-- 1 root root 309 2011-02-03 11:08 passwd
> -rw-r--r-- 1 root root 2259 2011-02-03 22:36 svnserve.conf
>
> $ more /svn/repos/conf/svnserve.conf
> [general]
> anon-access = none
> auth-access = write
> authz-db = authz
> realm = NWTechServe
>
> [sasl]
> use-sasl = true
> min-encryption = 256
> max-encryption = 512
>
> $ ls -l /etc/sasl2/
> total 16
> -rw-r----- 1 root root 12288 2011-02-05 11:04 nwts-db
> -rw-r--r-- 1 root root 47 2011-02-05 11:03 slapd.conf
> -rw-r--r-- 1 root root 102 2011-02-05 11:03 svn.conf
>
> $ more /etc/sasl2/slapd.conf (already set up by Sasl)
> mech_list: gssapi digest-md5 cram-md5 external
>
> $ more /etc/sasl2/svn.conf
> pwcheck_method: auxprop
> auxprop_plugin: sasldb
> sasldb_path: /etc/sasl2/nwts-db
> mech_list: DIGEST-MD5
>
> $ saslpasswd2 -c -f /etc/sasl2/nwts-db -u NWTechServe nicholas
> [entered password]
>
> $ sasldblistusers2 -f /etc/sasl2/nwts-db
> nicholas_at_NWTechServe: userPassword
>
> $ /etc/init.d/saslauthd start
> [started]
>
> $ testsaslauthd -u nicholas -p [password]
> 0: NO "authentication failed"
>
> $ testsaslauthd -u nicholas -p [password] -r NWTechServe
> 0: NO "authentication failed"
>
> $ testsaslauthd -u nicholas -p [password] -s svn
> 0: NO "authentication failed"
>
> $ testsaslauthd -u nicholas -p [password] -r NWTechServe -s svn
> 0: NO "authentication failed"
>
> $ testsaslauthd -u nicholas -p [password] -f /etc/sasl2/nwts-db
> connect() : Connection refused
> 0:
>
> $ testsaslauthd -u nicholas -p [password] -r NWTechServe -f /etc/sasl2/nwts-db
> connect() : Connection refused
> 0:
>
> $testsaslauthd -u nicholas -p [password] -s svn -f /etc/sasl2/nwts-db
> connect() : Connection refused
> 0:
>
> $testsaslauthd -u nicholas -p [password] -r NWTechServe -s svn -f /etc/sasl2/nwts-db
> connect() : Connection refused
> 0:
>
> I've also tried running svnserve (as root) and trying to connect but "svn: Could not obtain the list of SASL mechanisms". However, I don't think that result is even valid yet, as I can't even successfully test my Sasl configuration.
>
> I'm hoping I'm making an obvious error that someone on this list will see.
>
> Any ideas?
>
> Thanks!
>
> Nick
Received on 2011-02-08 16:27:11 CET

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.