Package: subversion
Version: 1.4.6dfsg1-4
Severity: normal
I'm using subversion with Kerberos (gssapi) authentication. It works
perfect, as long as svn action takes less than 5 minutes. For long SVN
checkout over slow link, I see following:
...<checking out something>
A dir_to_checout/just_another_file
Checked out revision NNN.
bash$ echo $?
0
However, checkout is incomplete -- all the files which should be
checkout later than "just_another_file" are missed. If I
"cd dir_to_checout" and run "svn up", I get missing files (or some of
them -- again, if it takes more than 5 minutes...)
In Apache log on Server, I see something like:
[Sun Jul 06 14:44:45 2008] [error] [client 192.168.38.48] gss_accept_sec_context
() failed: Miscellaneous failure (Clock skew too great)
<repeat this 10-100 times>
As 5 minutes is the standard clockskew value for Kerberos, I have a guess
what is going on:
- svn finds kerberos credentials
- svn tries to re-use that credentials again and again, connecting to
server many times without updating Kerberos message
- after 5 minutes, Apache (and mod_kerb) see that Kerberos message is
too old.
Additionally, svn fails to report this problem -- see
"Checked out revision NNN." message above
I'm not sure if it is bug of subversion or libneon -- feel free to
reassign.
I do not think that the server version is important, but I use
apache2=2.2.3-4+etch4 and subversion=1.4.2dfsg1-2 as server.
The same problem exists with subversion client from etch (1.4.2dfsg1-2)
and from sid (1.5.0dfsg1-3).
Tell me if you need any more information.
Thank you for your work!
-- System Information:
Debian Release: lenny/sid
APT prefers testing
APT policy: (900, 'testing'), (50, 'experimental'), (50, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.24-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages subversion depends on:
ii libapr1 1.2.12-4 The Apache Portable Runtime Librar
ii libc6 2.7-10 GNU C Library: Shared libraries
ii libsvn1 1.4.6dfsg1-4 Shared libraries used by Subversio
subversion recommends no packages.
-- no debconf information
--
Regards,
Sasha.
Alexandra N. Kossovsky, software engineer.
e-mail: [EMAIL PROTECTED]
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
