kerberos authentication with neon 0.29.3
Dariush Pietrzak
ml-neon at safo.in
Fri Mar 12 01:57:16 EST 2010
Hi,
as to specific problems with neon 0.29.3 here's all I know:
After switching to neon 0.29.3, TortoiseSVN started behaving strangely
- first request comes with Negotiate stuff, so on server I can see this:
10.10.10.236 - thomasj at KERBEROS.PL [03/Mar/2010:08:56:56 +0100] "OPTIONS /svn/Integracja HTTP/1.1" 200 152 "-" "SVN/1.6.9 (r901367)/TortoiseSVN-1.6.7.18415 neon/0.29.3"
but then the second request enters like this:
10.10.10.236 - - [03/Mar/2010:08:56:56 +0100] "PROPFIND /svn/Integracja HTTP/1.1" 401 394 "-" "SVN/1.6.9 (r901367)/TortoiseSVN-1.6.7.18415 neon/0.29.3"
people from TortoiseSVN check those requests, and it looks like
first one accepts Negotiate, but second one is Basic-only.
The same version of TortoiseSVN linked against 0.28.6 works correctly.
There are other clients using neon - for example svn command line client,
that use neon 0.29.3, and from users perspective they work fine, but when
looking through server logs, I can see that all of them go through this pattern
- one request is without negotiate, then they retry:
10.10.10.55 - - [01/Mar/2010:14:43:57 +0100] "OPTIONS /svn/Product12Test HTTP/1.1" 401 394 "-" "SVN/1.6.9 (r901367) neon/0.29.3"
10.10.10.55 - eyck at KERBEROS.PL [01/Mar/2010:14:43:57 +0100] "OPTIONS /svn/Product12Test HTTP/1.1" 200 155 "-" "SVN/1.6.9 (r901367) neon/0.29.3"
10.10.10.55 - - [01/Mar/2010:14:43:57 +0100] "PROPFIND /svn/Product12Test HTTP/1.1" 401 394 "-" "SVN/1.6.9 (r901367) neon/0.29.3"
10.10.10.55 - eyck at KERBEROS.PL [01/Mar/2010:14:43:57 +0100] "PROPFIND /svn/Product12Test HTTP/1.1" 207 350 "-" "SVN/1.6.9 (r901367) neon/0.29.3"
10.10.10.55 - - [01/Mar/2010:14:43:57 +0100] "PROPFIND /svn/Product12Test/!svn/vcc/default HTTP/1.1" 401 394 "-" "SVN/1.6.9 (r901367) neon/0.29.3"
10.10.10.55 - eyck at KERBEROS.PL [01/Mar/2010:14:43:57 +0100] "PROPFIND /svn/Product12Test/!svn/vcc/default HTTP/1.1" 207 254 "-" "SVN/1.6.9 (r901367) neon/0.29.3"
10.10.10.55 - - [01/Mar/2010:14:43:57 +0100] "PROPFIND /svn/Product12Test/!svn/bln/10350 HTTP/1.1" 401 394 "-" "SVN/1.6.9 (r901367) neon/0.29.3"
10.10.10.55 - eyck at KERBEROS.PL [01/Mar/2010:14:43:57 +0100] "PROPFIND /svn/Product12Test/!svn/bln/10350 HTTP/1.1" 207 267 "-" "SVN/1.6.9 (r901367) neon/0.29.3"
before neon 0.29.3 those tools managed with only single request
for every operation.
regards, Eyck
--
Key fingerprint = 40D0 9FFB 9939 7320 8294 05E0 BCC7 02C4 75CC 50D9
Total Existance Failure
More information about the neon
mailing list