Re: RB, SVN, and AD

For now, they'll need to log in. We're working on AD/LDAP user/group sync as part of our Power Pack product. Christian On Wednesday, July 13, 2016, Cathy Mullican wrote: > One last related question -- is there a way for RB to automatically import > a group of AD users so

Re: RB, SVN, and AD

One last related question -- is there a way for RB to automatically import a group of AD users so I can configure the accounts and maybe do some more testing, or do I need to have each person go to the site and log in in order for the account to be created? On Wednesday, July 13, 2016 at

Re: RB, SVN, and AD

Just had to add http-auth-types=basic to the [global] section of the .subversion/servers file and enable basic auth in addition to the integrated Windows auth on the server. Our initial confusion was because you can't have a non-AD user in addition to the Windows users, and because I wasn't

Re: RB, SVN, and AD

Hi Cathy, Glad that's been solved! Been working on figuring out the Kerberos stuff, but I haven't gotten as far as I'd like. The way you have it now is probably the ideal way, for performance and maintenance reasons. Would you be able to share what you did to set this up? Thanks, Christian --

Re: RB, SVN, and AD

Well, after all that fuss...it turns out that you CAN combine Integrated Windows Authentication and Basic Windows Authentication with VisualSVN Server, it's just that the user still has to be in your Active Directory. (Docs were unclear, and I'm not admin on the SVN server, so there was a

Re: RB, SVN, and AD

So here's what I know: Our SVN server is running VisualSVN Enterprise Edition rather than svnserve Integrated Windows Authentication is a feature of that product, and currently, if it's enabled, it's the only authentication method allowed. I've run kinit on the server where I'm trying to install

Re: RB, SVN, and AD

Hey Stephen, Cathy, Trying to educate myself on this... I'd love to get some sanity-checking and additional details on how this works. I dug through the Subversion and serf source code. It looks like libsvn handles doing SPNEGO on our behalf, so long as the user has run kinit at some point. What

Re: RB, SVN, and AD

I'm sorry it's proving to be a complicated tool for your usage... That's definitely not our goal, though this is the first time we've had a request to support Kerberos with Subversion. Just not a common setup. Most use SSH keys or username/password for authentication, and have no problem getting

Re: RB, SVN, and AD

I'll note that it would be helpful if there were any documentation about setting RB up with sqlite, beyond "Typically on development setups, SQLite is used for the database, as this allows for quick and easy database creation, backups, multiple versions, and deletions." Running

Re: RB, SVN, and AD

I'll try it, but there's only one site and one database, on one server, so I don't really see how consistency is an issue here. This was supposed to be a nice simple tool to introduce code reviews for the team, and instead, it's become something of a nightmare. The only thing is, I don't see

Re: RB, SVN, and AD

Hi Cathy, This is against the main MySQL database? If so, it might be because of the mixed installs (production servers are meant to run off of a Review Board site directory, which must be consistent in settings across all servers using the DB, and installed packages rather than development

Re: RB, SVN, and AD

Well, I got through the first few errors (updated some symlinks and permissions), but it's still giving me a 500 when I try to load the site. Nothing in the RB log file except " - INFO - - Reloading logging settings"; nothing in the apache error or access logs, either., Not sure where to go from

Re: RB, SVN, and AD

Woot; that got me fun new errors in the RB error log that I may actually be able to do something about, but probably not until late today or tomorrow (meetings). But the install and upgrade processes succeeded this time. Progress! On Wed, Jul 6, 2016 at 1:42 PM, Christian Hammond

Re: RB, SVN, and AD

For the mysql_config issue, what you'll need is the development package for MySQL. Try: apt-get build-dep python-mysqldb This will install all dependencies needed to build that package: Python development headers, MySQL development headers, etc. Then the pip install should work. Christian

Re: RB, SVN, and AD

As I said, I followed the directions to set up a virtual environment: pip install virtualenv virtualenv ~/envs/rb_krb source ~/envs/rb_krb/bin/activate install any missing dependencies (just gettext, IIRC, but it's been a few days now, and I don't see it in my command history) git clone

Re: RB, SVN, and AD

Hi Cathy, Can you show me how you tried installing the package, and how the dev environment is set up? As for the site and DB, Review Board expects to know where on the file system its associated site lives (in order to access local data, media files, logs, configuration, etc.), and if you set

Re: RB, SVN, and AD

I followed the directions at https://www.reviewboard.org/docs/codebase/dev/getting-started/ to set up a dev environment. I made a change based on some info from #subvertpy, though I'm not particularly confident in it, but I'd like to test it. I tried to use the upgrade directions to upgrade

Re: RB, SVN, and AD

It wasn't entirely clear to me from the documentation which library was preferred, and neither seems to have a terribly active support community. I've switched to subvertpy for the moment, but switching back is easily done if it doesn't work out.

Re: RB, SVN, and AD

Hi Cathy, SubvertPy support was added as an alternative to PySVN, given how difficult PySVN is to install. However, we've found it to be more buggy in other ways (many random problems have been solved by moving from SubvertPy to PySVN). That said, if it works for you, and there's any ability to

Re: RB, SVN, and AD

Asking around my network got a few potentially-useful resources, but at this point, I think the change actually needs to happen in the SVN library. Since the person who wrote SubvertPy also wrote PyKerberos, I wonder if it might work better than PySVN, and I'm not actually sure why I had it

Re: RB, SVN, and AD

I don't have time to work on such a patch directly, but I'd be happy to lend my Kerberos experience towards reviewing any such patch. I think that would be a very useful feature. I'd recommend working on full SPNEGO support rather than a Kerberos-specific solution. Take a look at the

Re: RB, SVN, and AD

Hi Cathy, Would you or someone on your end who has a familiarity with Python and Kerberos be willing to work with us on adding support? Review Board is open source, and I'd be willing to take a patch and assist with any work toward it. Christian On Tuesday, June 28, 2016, Cathy Mullican

Re: RB, SVN, and AD

It looks like RB isn't using (doesn't support?) kerberos authentication, and that seems to be necessary for the set up we have. Sadly, this may mean we can't use RB at this time. :( On Monday, June 27, 2016 at 5:22:17 PM UTC-7, Cathy Mullican wrote: > > Since it is working on the command line

Re: RB, SVN, and AD

Since it is working on the command line at this point, my money would be on #2 rather than #1. http://serverfault.com/questions/183231/how-to-configure-review-board-running-under-linux-to-use-a-ldap-user is the most relevant-seeming info I've found so far, but enough has changed in the 5+

Re: RB, SVN, and AD

Okay. So it's probably one of two things: 1) Something is still messed up somewhere with the recompilation. I don't know what, and can't really debug that from here. 2) The standard way of authenticating that we do doesn't support your setup. It could easily be #2. We must be able to

Re: RB, SVN, and AD

The server is VisualSVN (paid edition), with Windows AD authentication. The server where RB is running is joined to the domain, and I can authenticate from the command line. Most users connect via TortoiseSVN on their Windows systems; I also have one other Ubuntu box configured so that i can

Re: RB, SVN, and AD

Hi Cathy, Progress is good! I think I'll need more info on your setup at this point though. Can you tell me more about how authentication works on your Subversion setup? From the client's end, is it a standard username/password, or is more involved? What does the server setup look like? The

Re: RB, SVN, and AD

I did apt-get source python-svn then started trying to follow the directions in INSTALL.html, but they didn't work at all...although lookin gback now, some of that may have been because it was Friday afternoon and I missed something; I'm trying again now. On Friday, June 24, 2016 at 5:44:51

Re: RB, SVN, and AD

Hi Cathy, This might be an incompatibility between libsvn and pysvn. You may need to now recompile pysvn and replace the copies on the filesystem. That or go back to purely system libs for svn, libsvn, pysvn, serf, etc. Christian -- Christian Hammond President/CEO of Beanbag

Re: RB, SVN, and AD

Same error with the repository root path -- I actually started with that. I enabled logging, and now have this error message: 2016-06-24 20:29:24,091 - ERROR - - SVN: Failed to get repository information for https://az-fs1.revshare.int/svn/rad: ra_serf was compiled for serf 1.3.8 but loaded

Re: RB, SVN, and AD

Hi Cathy, You may need to enable logging in Admin UI -> Logging Settings. For the SVN repository path, you'll need to point it to the root of the SVN repository, rather than a subdirectory within it. Basically, the "Repository Root" value from "svn info". See if that fixes it. If not, I'll help

Re: RB, SVN, and AD

There's not much to show -- see the attached screenshot. That is the correct URL, as shown by svn info, and googling tells me that's the message I'd see with an

Re: RB, SVN, and AD

Hi Cathy, Can you show me what errors you're seeing, along with the configuration set for the repository? Also, is there anything in the Review Board log files? Christian -- Christian Hammond President/CEO of Beanbag Makers of Review Board

RB, SVN, and AD

I have RB 2.5.6.1 set up and working on Ubuntu 14.04, with AD authentication -- I can log in to RB as admin or as my domain user. Now I'm trying to add a repo. Our SVN repo runs under VisualSVN (Pro), with AD authentication. I can set up the server to join the group, and run svn info from