Hello, all.
Please, help me configure SASL authentication on a public-
unix machine, where I am not the sytem administrator.
I created my own SASL directory:
$ mkdir ~/sasl
$ cd ~/sasl
created a SASL DB in it with my username and realm:
~/sasl $ saslpasswd2 -cf sasldb -u playground
~/sasl $ sasldblistusers2 -f sasldb
ant@playground: userPassword
For some reason or other, no instructions tell me to specify
Subversion's application name with -a, so I didn't do so.
In svnserve.conf, I specified the same realm, and enabled
SASL:
[general]
realm = playground
[sasl]
use-sasl = true
min-encryption = 128
max-encryption = 256
Then I created a SASL configuration file for Subversion:
~/sasl $ cat > svn.conf <<EOF
*> pwcheck_method: auxprop
*> auxprop_plugin: sasldb
*> mech_list: ANONYMOUS DIGEST-MD5
*> EOF
~/sasl $ cat svn.conf
pwcheck_method: auxprop
auxprop_plugin: sasldb
mech_list: ANONYMOUS DIGEST-MD5
SASL does not seem to provide a configuration setting to
indicate the path to the SASL database, but it can be
specified in environment variable SASL_DBNAME, whereas the
path to the configuration directory can be specified in
environment variable SASL_CONFDIR. Therefore, I invoke my
svnserve like this:
NEG_DIR=/home/ant/svn/test/
env SASL_CONFDIR=/home/ant/sasl/ \
SASL_SASL_DBNAME=/home/ant/sasl/sasldb \
svnserve -d \
--listen-port=5120 \
--log-file=${NEG_DIR}var/svnserve.log \
-r ${NEG_DIR}svn
from my own user, the same that I used above to create and
fill the sasl directory, yet when I try to checkout that
test repo, authentiation fails:
Authentication realm: <svn://localhost:5120> playground
Username: ant
Password for 'ant': ********
svn: E170013: Unable to connect to a repository at URL
'svn://localhost:5120/test'
svn: E170001: Authentication error from server: SASL(-1): generic failure:
unable to canonify user and get auxprops
Wtih svnserve log containing the following brief entry:
952350 2026-09-07T21:42:19.065053Z 127.0.0.1 - - ERR - 0 210002 Network
connection closed unexpectedly
What did I do wrong?
--
() ascii ribbon campaign -- against html e-mail
/\ www.asciiribbon.org -- against proprietary attachments
