kerberos authentication with neon 0.29.3

Dariush Pietrzak ml-neon at safo.in
Fri Mar 12 01:57:16 EST 2010


Hi,
 as to specific problems with neon 0.29.3 here's all I know:

After switching to neon 0.29.3, TortoiseSVN started behaving strangely 
- first request comes with Negotiate stuff, so on server I can see this:

10.10.10.236 - thomasj at KERBEROS.PL [03/Mar/2010:08:56:56 +0100] "OPTIONS /svn/Integracja HTTP/1.1" 200 152 "-" "SVN/1.6.9 (r901367)/TortoiseSVN-1.6.7.18415 neon/0.29.3"
 but then the second request enters like this:
10.10.10.236 - - [03/Mar/2010:08:56:56 +0100] "PROPFIND /svn/Integracja HTTP/1.1" 401 394 "-" "SVN/1.6.9 (r901367)/TortoiseSVN-1.6.7.18415 neon/0.29.3"

 people from TortoiseSVN check those requests, and it looks like
first one accepts Negotiate, but second one is Basic-only.
 The same version of TortoiseSVN linked against 0.28.6 works correctly.

 There are other clients using neon - for example svn command line client,
that use neon 0.29.3, and from users perspective they work fine, but when
looking through server logs, I can see that all of them go through this pattern
 - one request is without negotiate, then they retry:
10.10.10.55 - - [01/Mar/2010:14:43:57 +0100] "OPTIONS /svn/Product12Test HTTP/1.1" 401 394 "-" "SVN/1.6.9 (r901367) neon/0.29.3"
10.10.10.55 - eyck at KERBEROS.PL [01/Mar/2010:14:43:57 +0100] "OPTIONS /svn/Product12Test HTTP/1.1" 200 155 "-" "SVN/1.6.9 (r901367) neon/0.29.3"
10.10.10.55 - - [01/Mar/2010:14:43:57 +0100] "PROPFIND /svn/Product12Test HTTP/1.1" 401 394 "-" "SVN/1.6.9 (r901367) neon/0.29.3"
10.10.10.55 - eyck at KERBEROS.PL [01/Mar/2010:14:43:57 +0100] "PROPFIND /svn/Product12Test HTTP/1.1" 207 350 "-" "SVN/1.6.9 (r901367) neon/0.29.3"
10.10.10.55 - - [01/Mar/2010:14:43:57 +0100] "PROPFIND /svn/Product12Test/!svn/vcc/default HTTP/1.1" 401 394 "-" "SVN/1.6.9 (r901367) neon/0.29.3"
10.10.10.55 - eyck at KERBEROS.PL [01/Mar/2010:14:43:57 +0100] "PROPFIND /svn/Product12Test/!svn/vcc/default HTTP/1.1" 207 254 "-" "SVN/1.6.9 (r901367) neon/0.29.3"
10.10.10.55 - - [01/Mar/2010:14:43:57 +0100] "PROPFIND /svn/Product12Test/!svn/bln/10350 HTTP/1.1" 401 394 "-" "SVN/1.6.9 (r901367) neon/0.29.3"
10.10.10.55 - eyck at KERBEROS.PL [01/Mar/2010:14:43:57 +0100] "PROPFIND /svn/Product12Test/!svn/bln/10350 HTTP/1.1" 207 267 "-" "SVN/1.6.9 (r901367) neon/0.29.3"

 before neon 0.29.3 those tools managed with only single request 
for every operation.


regards, Eyck
-- 
Key fingerprint = 40D0 9FFB 9939 7320 8294  05E0 BCC7 02C4 75CC 50D9
 Total Existance Failure



More information about the neon mailing list