I'm still having trouble cloning/pulling/pushing on Windows/IIS....

This is my configuration:

Anonymous access.in IIS is disabled.
Integrated Windows Authentication is enabled.
Basic Authentication is enabled.
Allow REMOTE_USER authentication is enabled in the repository.

If I run Fossil in server mode on my server:

Fossil open \Projects\Test\Test.fossil
Fossil.server

then I can clone the repository like this:

Fossil clone http://myserver:8080/ Test.fossil

I captured the exchange:

Request:

POST /xfer/xfer HTTP/1.0
Host: myserver:8080
User-Agent: Fossil/[1d93222627]
Content-Type: application/x-fossil
Content-Length: 65

<65 bytes of binary data>

Reponse:

POST /xfer/xfer HTTP/1.0
Host: myserver:8080
User-Agent: Fossil/[1d93222627]
Content-Type: application/x-fossil
Content-Length: 267

<data packets>

Since I do not see any login information, I assume that authentication is not 
required for cloning.

If I browse the repository, the browser provides authentication to IIS which, 
in turn, sets REMOTE_USER=tperovic before invoking Fossil via CGI. The result 
is auto-login based on Windows integrated authentication. I get "Logged on as 
tperovic" on every Fossil web page.

Now, if I try to clone the repository using the IIS/CGI  interface, it fails:

Fossil clone http://myserver/Projects/Test/Test.fossil Test.fossil

Request:

POST /Projects/Test/Test.fossil/xfer/xfer HTTP/1.0
Host: vserver1
User-Agent: Fossil/[1d93222627]
Content-Type: application/x-fossil
Content-Length: 63

Media Type: application/x-fossil (63 bytes)

Reponse:

HTTP/1.1 401 Unauthorized
Content-Length: 1539
Content-Type: text/html
Server: Microsoft-IIS/6.0
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
WWW-Authenticate: Basic realm="My Domain"
Date: Fri, 01 Apr 2011 18:05:16 GMT
Connection: close

<HTML><HEAD><TITLE>You are not authorized to view this page</TITLE>
...
.<h2>HTTP Error 401.2 - Unauthorized: Access is denied due to server 
configuration.<br>Internet Information Services (IIS)</h2>
...
</HTML>

Normally, the browser would negotiate the authentication method with IIS. The 
WWW-Authenticate directives tell the browser which authentication methods are 
available. Fossil provides no authentication so IIS rejects the request . Thus, 
I conlude, anonymous access must to be enabled for cloning to work. I would 
imagine you would have the same issue on Unix/Linux.

Is this correct?

[cid:image001.jpg@01CBF508.D3E254C0]

TONY PEROVIC

tpero...@compumation.com<mailto:tpero...@compumation.com>
www.compumation.com

205 W. Grand Ave., Ste. 121
Bensenville, IL  60106
630-860-1921  Phone
630-860-1928  Fax


<<inline: image001.jpg>>

_______________________________________________
fossil-users mailing list
fossil-users@lists.fossil-scm.org
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users

Reply via email to