Hello,

I thought I would ask on the neon list after asking and not hearing back 
from the [EMAIL PROTECTED] and [EMAIL PROTECTED] lists.

Is Negotiate authentication known to work with how neon 0.25.4 is used 
by Subversion 1.3.0?  Does anyone have a sample Apache2 config or can 
tell me what's wrong with mine?

Thanks,
Patrick


----- Forwarded message from Patrick Ryan <[EMAIL PROTECTED]> -----

From: Patrick Ryan <[EMAIL PROTECTED]>
Subject:  Negotiate Authentication Broken with Subversion 1.3.0
Date: Wed, 22 Feb 2006 17:44:39 -0800
To: [EMAIL PROTECTED]

Hello,

I've got two servers both hosting repositories.  I'm using Apache2 
mod_auth_kerb to authenticate to an Active Directory server.  When I 
turn off kerberos password authentication to force the use of Negotiate 
authentication, both Subversion and Firefox fail to authenticate, but IE 
works with Negotiate authentication against the server.  Both Subversion 
and Firefox fail without even prompting for credentials.

The client is choosing kerberos password authentication, but when I 
force Negotiate authentication, neither Subversion nor Firefox work.  I 
expect Firefox to break, but not Neon 0.25.4 that's included with 
Subversion 1.3.0.  The error message appears to be the same in either 
case (401 in the Apache logs):

[EMAIL PROTECTED] sandbox]$ svn ci
svn: Commit failed (details follow):
svn: MKACTIVITY of 
'/svn/sandbox/!svn/act/16c1adf6-6b0d-0410-9322-c1268cc03508': authorization 
failed (http://pledge.my.realm)
svn: Your commit message was left in a temporary file:
svn:    '/home/pryan/pledge/sandbox/svn-commit.tmp'
[EMAIL PROTECTED] sandbox]$


Apache2 mod_auth_kerb working config:

    AuthType Kerberos
    KrbAuthRealms MY.REALM
    Krb5Keytab keytab_file


Apache2 mod_auth_kerb broken config:

    AuthType Kerberos
    KrbAuthRealms MY.REALM
    KrbMethodNegotiate on
    KrbMethodK5Passwd off
    Krb5Keytab keytab_file


Server 1
--------
OS: Debian sid
Debian subversion 1.2.3dfsg1-3
Debian apache2 2.0.55-4
Debian libapache-mod-auth-kerb 4.996-5.0-rc6-3


Server 2
--------
OS: Red Hat Enterprise Linux WS 3u5
RHEL Apache2 httpd-2.0.46-46.ent
Subversion 1.3.0
mod_auth_kerb 5.0rc6


Client 1
--------
OS: Windows XP SP2
TortoiseSVN 1.3.1 (subversion 1.3.0 with neon 0.25.4)


Client 2
--------
The subversion client from server 2.


Any ideas what's wrong with my setup?

Thanks,
Patrick

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


----- End forwarded message -----
_______________________________________________
neon mailing list
[email protected]
http://mailman.webdav.org/mailman/listinfo/neon

Reply via email to