[ 
https://issues.apache.org/jira/browse/SVN-4641?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15501492#comment-15501492
 ] 

Michael Osipov edited comment on SVN-4641 at 9/18/16 7:12 PM:
--------------------------------------------------------------

This is an issue which cannot be neithe solved by Subversion or libserf. This 
is a purely implementation-specific issue of MIT Kerberos or Heimdal.

Your approach is wrong. There are two ways of solving this issue:

1. try [{{kstart(1)}}|https://www.eyrie.org/~eagle/software/kstart/] or
2. better yet, use client keytabs with MIT Kerberos and your pain will go away. 
I am doing this for quite some time now with libserf/Subversion and 
libcurl/curl.


was (Author: michael-o):
This is an issue which cannot be neithe solved by Subversion or libserf. This 
is a purely implementation-specific issue of MIT Kerberos or Heimdal.

There are two ways of solving this issue:

1. try [{{kstart(1)}}|https://www.eyrie.org/~eagle/software/kstart/] or
2. better yet, use client keytabs with MIT Kerberos and your pain will go away. 
I am doing this for quite some time now with libserf/Subversion and 
libcurl/curl.

> silent incomplete checkout with Kerberos timeout
> ------------------------------------------------
>
>                 Key: SVN-4641
>                 URL: https://issues.apache.org/jira/browse/SVN-4641
>             Project: Subversion
>          Issue Type: Bug
>          Components: cmdline client
>    Affects Versions: 1.8.8, 1.9.4
>         Environment: Server is Debian GNU/Linux 8, Apache 2.4, using either 
> old SVN 1.8.10 and also when cleanly upgraded to 1.9.4 (using completely 
> newly created svn repo), supporting Kerberos authentication, x86_64.
> Client is Windows 2008 R2 x86_64, svn cli 1.9.4, using Kerberos 
> authentication.
> Kerberos Tickets are valid for 5 minutes.
> Checkout takes much longer than 5 minutes.
>            Reporter: Tim-Christian Bloss
>            Priority: Critical
>              Labels: performance, security, windows
>
> When checking out by svn CLI using Kerberos tickes for authentication and 
> checkout takes more than 5 minutes (time that Kerberos tickets are valid), 
> then the checkout ends with state "success" (return code 0) but all files 
> which could not be fetched within the validity duration of the Kerberos 
> ticket are missing.
> SVN also does not seem to print any warnings or information regarding this 
> issue we could automatically react on.
> This leads to supposedly successfull checkouts but builds do fail due to 
> missing resources.
> Example: Large maven project structure of 200+ submodules (yes we know it's 
> "not nice", but there's no chance to change this!), checkout takes about 15 
> minutes, but after 5 minutes checkout end with state "success", but two 
> thirds of data volume do not get checked out, including the main pom.xml.
> The same checkout using Debign GNU/Linux 8 x86_64 with cli 1.9.4 and basic 
> authentication works correct, checking all files out, taking the full 
> expected 15 minutes for the checkout.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to