You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Tristan Miller <ps...@nothingisreal.com> on 2015/03/19 11:00:52 UTC

Subversion doesn't store credentials in kwallet

Greetings.

I'm experiencing a problem with using KWallet as a password store.  My 
operating system is openSUSE 13.2 (x86_64) and I can reproduce the issue 
with the Subversion 1.8.11 (r1643975) binaries provided by openSUSE, as 
well as Subversion 1.9.0-beta1 compiled from source (configured only with 
--libdir=/usr/local/lib64 and no other options, and built with GCC 4.8.3).

In my ~/.subversion/config I have KWallet storage enabled with the 
following lines:

[auth]
password-stores = kwallet

Despite this, when I try to check out or commit files with a password-
protected repository, Subversion doesn't invoke KWallet to fetch or store 
credentials:

> $ svn co https://www.example.com/svn/foo
> Authentication realm: <https://www.example.com:443> Foobar Domain Login
> Password for 'bar': ********
> 
> 
> -----------------------------------------------------------------------
> 
> ATTENTION!  Your password for authentication realm:
>    <https://www.example.com:443> Foobar Domain Login
> 
> can only be stored to disk unencrypted!  You are advised to configure
> your system so that Subversion can store passwords encrypted, if
> possible.  See the documentation for details.
> 
> You can avoid future appearances of this warning by setting the value
> of the 'store-plaintext-passwords' option to either 'yes' or 'no' in
> '/home/bar/.subversion/servers'.
> -----------------------------------------------------------------------
> Store password unencrypted (yes/no)?

Any idea what could be wrong here?  Other applications on my system don't 
have any problem using KWallet.  And I wasn't having this problem a few 
months ago, so I'm assuming something broke after an upgrade of Subversion 
and/or KWallet.

I see someone else has already opened an issue for this at 
<http://subversion.tigris.org/issues/show_bug.cgi?id=3595> but it's been 
closed due to their not having first posted the issue here.

Regards,
Tristan

-- 
   _
  _V.-o         Tristan Miller          ><  Space is limited
 / |`-'  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-  <>  In a haiku, so it's hard
(7_\\    http://www.nothingisreal.com/  ><  To finish what you

Re: Subversion doesn't store credentials in kwallet

Posted by Tristan Miller <ps...@nothingisreal.com>.
Greetings.

On Thursday 19 March 2015, Tristan Miller wrote:
> I'm experiencing a problem with using KWallet as a password store.  My
> operating system is openSUSE 13.2 (x86_64) and I can reproduce the issue
> with the Subversion 1.8.11 (r1643975) binaries provided by openSUSE, as
> well as Subversion 1.9.0-beta1 compiled from source (configured only
> with --libdir=/usr/local/lib64 and no other options, and built with GCC
> 4.8.3).

Sorry, it occurs to me now that I should have also reported my version of 
KWallet:

$ /usr/bin/kwalletd --version
Qt: 4.8.6
KDE Development Platform: 4.14.5
KDE Wallet Service: 0.2

Regards,
Tristan

-- 
   _
  _V.-o         Tristan Miller          ><  Space is limited
 / |`-'  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-  <>  In a haiku, so it's hard
(7_\\    http://www.nothingisreal.com/  ><  To finish what you

Re: Subversion doesn't store credentials in kwallet

Posted by Stefan Sperling <st...@elego.de>.
On Thu, Mar 19, 2015 at 11:00:52AM +0100, Tristan Miller wrote:
> Greetings.
> 
> I'm experiencing a problem with using KWallet as a password store.  My 
> operating system is openSUSE 13.2 (x86_64) and I can reproduce the issue 
> with the Subversion 1.8.11 (r1643975) binaries provided by openSUSE, as 
> well as Subversion 1.9.0-beta1 compiled from source (configured only with 
> --libdir=/usr/local/lib64 and no other options, and built with GCC 4.8.3).
> 
> In my ~/.subversion/config I have KWallet storage enabled with the 
> following lines:
> 
> [auth]
> password-stores = kwallet
> 
> Despite this, when I try to check out or commit files with a password-
> protected repository, Subversion doesn't invoke KWallet to fetch or store 
> credentials:

Please show your config.log file.

Re: Subversion doesn't store credentials in kwallet

Posted by Nico Kadel-Garcia <nk...@gmail.com>.
On Thu, Mar 19, 2015 at 8:04 AM, Tristan Miller
<ps...@nothingisreal.com> wrote:
> Greetings.
>
> On Thursday 19 March 2015, Andreas Stieger wrote:
>> On 19/03/15 11:00, Tristan Miller wrote:
>> > I'm experiencing a problem with using KWallet as a password store.  My
>> > operating system is openSUSE 13.2 (x86_64) and I can reproduce the
>> > issue
>>
>> That's my package, and this works.
>>
>> > with the Subversion 1.8.11 (r1643975) binaries provided by openSUSE,
>>
>> Do you have libsvn_auth_kwallet-1-0 installed? That's required.
>
> Yes, I've got libsvn_auth_kwallet-1-0-1.8.11-2.11.1.x86_64 installed.

Next time, build from the SRPM, or at least start from there. It will
give you a better handle on system dependencies and options for
"./configure" to compile the necessary components.

I actually publish tools to backport current releases of Subversion to
RHEL 6, My approach involves some work, using tools like 'mock' to
build the Subversion packages in a pristine chroot cage environment to
make things work well. But it helps keep my developer environment,
which may have 3rd party library updates, from the build environment.
wjocj os odea;;u we;; defomed/

>> > well as Subversion 1.9.0-beta1 compiled from source (configured only
>> > with --libdir=/usr/local/lib64 and no other options, and built with
>> > GCC 4.8.3).
>>
>> Specifying --with-kwallet is required when building from source.
>
> OK, I'd overlooked that.  What -devel package provides the necessary
> headers? kdebase4-runtime provides kwalletd, but kdebase4-runtime-devel
> doesn't provide kwallet.h.  There is a separate kwallet-devel package which
> depends on libkwalletbackend5-5, neither of which I have installed and
> which in any case don't seem to be necessary for KWallet to work.

Yeah, I'm not looking forward to backporting Subersion 1.9 to RHEL 6.

>> Also
>> see devel:tools:scm:svn:1.9 / subversion in the obs if you are out for
>> testing 1.9.0-beta1. Also you will need libsvn_auth_kwallet-1-0
>> installed then.
>
> OK, I installed the packages from this repository and now everything works
> as expected.  Subversion no longer warns me about storing unencrypted
> passwords; instead it seems to be storing the password in kwallet.
>
> Regards,
> Tristan
>
> --
>    _
>   _V.-o         Tristan Miller          ><  Space is limited
>  / |`-'  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-  <>  In a haiku, so it's hard
> (7_\\    http://www.nothingisreal.com/  ><  To finish what you

Re: Subversion doesn't store credentials in kwallet

Posted by Tristan Miller <ps...@nothingisreal.com>.
Greetings.

On Thursday 19 March 2015, Andreas Stieger wrote:
> On 19/03/15 11:00, Tristan Miller wrote:
> > I'm experiencing a problem with using KWallet as a password store.  My
> > operating system is openSUSE 13.2 (x86_64) and I can reproduce the
> > issue
> 
> That's my package, and this works.
> 
> > with the Subversion 1.8.11 (r1643975) binaries provided by openSUSE,
> 
> Do you have libsvn_auth_kwallet-1-0 installed? That's required.

Yes, I've got libsvn_auth_kwallet-1-0-1.8.11-2.11.1.x86_64 installed.

> > well as Subversion 1.9.0-beta1 compiled from source (configured only
> > with --libdir=/usr/local/lib64 and no other options, and built with
> > GCC 4.8.3).
> 
> Specifying --with-kwallet is required when building from source.

OK, I'd overlooked that.  What -devel package provides the necessary 
headers? kdebase4-runtime provides kwalletd, but kdebase4-runtime-devel 
doesn't provide kwallet.h.  There is a separate kwallet-devel package which 
depends on libkwalletbackend5-5, neither of which I have installed and 
which in any case don't seem to be necessary for KWallet to work.

> Also
> see devel:tools:scm:svn:1.9 / subversion in the obs if you are out for
> testing 1.9.0-beta1. Also you will need libsvn_auth_kwallet-1-0
> installed then.

OK, I installed the packages from this repository and now everything works 
as expected.  Subversion no longer warns me about storing unencrypted 
passwords; instead it seems to be storing the password in kwallet.

Regards,
Tristan

-- 
   _
  _V.-o         Tristan Miller          ><  Space is limited
 / |`-'  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-  <>  In a haiku, so it's hard
(7_\\    http://www.nothingisreal.com/  ><  To finish what you

Re: Subversion doesn't store credentials in kwallet

Posted by Andreas Stieger <an...@gmx.de>.
Hi,

On 19/03/15 11:00, Tristan Miller wrote:
> I'm experiencing a problem with using KWallet as a password store.  My 
> operating system is openSUSE 13.2 (x86_64) and I can reproduce the issue 

That's my package, and this works.

> with the Subversion 1.8.11 (r1643975) binaries provided by openSUSE,

Do you have libsvn_auth_kwallet-1-0 installed? That's required.

> well as Subversion 1.9.0-beta1 compiled from source (configured only with 
> --libdir=/usr/local/lib64 and no other options, and built with GCC 4.8.3).

Specifying --with-kwallet is required when building from source. Also
see devel:tools:scm:svn:1.9 / subversion in the obs if you are out for
testing 1.9.0-beta1. Also you will need libsvn_auth_kwallet-1-0
installed then.

Andreas