Sorry for the cross-post / reply to self, but I figured out how to get subversion to do single sign on / kerberos auth on windows against mod_auth_kerb on linux, and maybe this will prevent someone else from having to spend an entire day on it.

--On Thursday, July 14, 2005 7:56 PM -0500 Christopher Mason <[EMAIL PROTECTED]> wrote:

[Thu Jul 14 16:37:27 2005] [error] [client 172.23.155.51]
gss_accept_sec_context() failed: Miscellaneous failure (Request is
a replay)

It turns out this is a replay cache issue in mod_auth_kerb 5.0rc4 (the version that's in Fedora Core 3) that's fixed in rc6. I'm not sure what IE does differently from neon that doesn't tickle it, but anyway...


G'day,
Above specific error ("request is a replay") re-surfaces with Apache 2.0.54-r12, mod_auth_kerb 5.0_rc6 & mit-krb5 1.4.1. I tested it on a Gentoo server against Microsoft Win2k Active Directory. Downgrading to mit-krb5 1.3.6-r3 seems to fix the issue.

Not sure if its Gentoo specific.

regards,
S. _______________________________________________
neon mailing list
[email protected]
http://mailman.webdav.org/mailman/listinfo/neon

Reply via email to