You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Deepak Balasubramaniam <de...@gmail.com> on 2005/12/07 18:52:06 UTC
Windows domain authentication error
Hi All,
We are currently in the process of migrating our Version management
from VSS to SVN. I was trying to setup the windows domain authentication for
SVN and followed all the steps mentioned at
http://www.subversionary.org/sspidomainauth. But when i try to access the
repository i get an Authenticantion denied error. I have given the info from
apache error.log below. We have installed apache 2.0.55 and SVN 1.2.3.
The entry i have in apache conf file is:
<Location "/test">
dav svn
SVNPath "d:/svntest"
# our user authentication policy
AuthName "SVN Server"
AuthType SSPI
SSPIAuth On
SSPIAuthoritative On
SSPIDomain nazcasolutions
SSPIOfferBasic on #let non-IE clients authenticate
#SSPIOmitDomain On # keep domain name in userid string
# passed down to mod_authz_svn
Require valid-user # A Require directive may? prevent userid
# strings from being passed down to mod_authz_svn
# our access control policy enforced by mod_authz_svn
AuthzSVNAccessFile "d:/svndav/svnaccess.conf"
</Location>
The entry i have in svnaccess.conf file is:
[test]
Deepak.B = rw
The error i get in error.log is:
[Wed Dec 07 12:31:12 2005] [notice] Apache/2.0.55 (Win32) SVN/1.2.3 DAV/2
mod_auth_sspi/1.0.3 configured -- resuming normal operations
[Wed Dec 07 12:31:12 2005] [notice] Server built: Oct 9 2005 19:16:56
[Wed Dec 07 12:31:12 2005] [notice] Parent: Created child process 3732
[Wed Dec 07 12:31:12 2005] [notice] Child 3732: Child process is running
[Wed Dec 07 12:31:13 2005] [notice] Child 448: Released the start mutex
[Wed Dec 07 12:31:13 2005] [notice] Child 3732: Acquired the start mutex.
[Wed Dec 07 12:31:13 2005] [notice] Child 3732: Starting 250 worker threads.
[Wed Dec 07 12:31:14 2005] [notice] Child 448: Waiting for 250 worker
threads to exit.
[Wed Dec 07 12:31:14 2005] [notice] Child 448: All worker threads have
exited.
[Wed Dec 07 12:31:14 2005] [notice] Child 448: Child process is exiting
[Wed Dec 07 12:48:05 2005] [error] [client 10.1.1.102] Access denied:
'nazcasolutions\\Deepak.B' PROPFIND test:/trunk
I also tried using different combinations of lower and upper cases for
username and domain. But none of them worked.
Can someone please help me with a resolution?
Thanks and Regards,
Deepak
--
Deepak Balasubramaniam
408-571-9196
____________________________________________________________
"Experience is the name everyone gives to their mistakes." --Oscar Wilde
____________________________________________________________
Re: Windows domain authentication error
Posted by Deepak Balasubramaniam <de...@gmail.com>.
Hi Frank,
I tried all the 3 ways you have said and still i get the same error.
Regards,
Deepak
On 12/7/05, Frank Gruman <fg...@verizon.net> wrote:
>
> Deepak Balasubramaniam wrote:
>
> Hi Kyle,
> Thanks for replying. I tried using the format you specified but still
> i get the same error.
>
> Regards,
> Deepak
>
>
>
> On 12/7/05, Kyle Kline <ky...@gmail.com> wrote:
>
> > if the name of your repo is truly svntest, then the perm entry should
> > look like this:
> > [svntest:/]
> > Deepak.B = rw
> >
> >
> >
> > On 12/7/05, Deepak Balasubramaniam < deepakbalasubramaniam@gmail.com>
> > wrote:
> >
> > > Hi All,
> > > We are currently in the process of migrating our Version
> > > management from VSS to SVN. I was trying to setup the windows domain
> > > authentication for SVN and followed all the steps mentioned at
> > > http://www.subversionary.org/sspidomainauth. But when i try to access
> > > the repository i get an Authenticantion denied error. I have given the info
> > > from apache error.log below. We have installed apache 2.0.55 and SVN
> > > 1.2.3 .
> > >
> > > The entry i have in apache conf file is:
> > >
> > > <Location "/test">
> > > dav svn
> > > SVNPath "d:/svntest"
> > >
> > > # our user authentication policy
> > > AuthName "SVN Server"
> > > AuthType SSPI
> > > SSPIAuth On
> > > SSPIAuthoritative On
> > > SSPIDomain nazcasolutions
> > > SSPIOfferBasic on #let non-IE clients authenticate
> > > #SSPIOmitDomain On # keep domain name in userid string
> > > # passed down to mod_authz_svn
> > > Require valid-user # A Require directive may? prevent userid
> > > # strings from being passed down to
> > > mod_authz_svn
> > >
> > > # our access control policy enforced by mod_authz_svn
> > > AuthzSVNAccessFile "d:/svndav/svnaccess.conf"
> > >
> > > </Location>
> > >
> > > The entry i have in svnaccess.conf file is:
> > >
> > > [test]
> > > Deepak.B = rw
> > > The error i get in error.log is:
> > > [Wed Dec 07 12:31:12 2005] [notice] Apache/2.0.55 (Win32) SVN/1.2.3
> > > DAV/2 mod_auth_sspi/1.0.3 configured -- resuming normal operations
> > > [Wed Dec 07 12:31:12 2005] [notice] Server built: Oct 9 2005 19:16:56
> > > [Wed Dec 07 12:31:12 2005] [notice] Parent: Created child process 3732
> > >
> > > [Wed Dec 07 12:31:12 2005] [notice] Child 3732: Child process is
> > > running
> > > [Wed Dec 07 12:31:13 2005] [notice] Child 448: Released the start
> > > mutex
> > > [Wed Dec 07 12:31:13 2005] [notice] Child 3732: Acquired the start
> > > mutex.
> > > [Wed Dec 07 12:31:13 2005] [notice] Child 3732: Starting 250 worker
> > > threads.
> > > [Wed Dec 07 12:31:14 2005] [notice] Child 448: Waiting for 250 worker
> > > threads to exit.
> > > [Wed Dec 07 12:31:14 2005] [notice] Child 448: All worker threads have
> > > exited.
> > > [Wed Dec 07 12:31:14 2005] [notice] Child 448: Child process is
> > > exiting
> > > [Wed Dec 07 12:48:05 2005] [error] [client 10.1.1.102] Access denied:
> > > 'nazcasolutions\\Deepak.B' PROPFIND test:/trunk
> > >
> > >
> > >
> > Try one of these things (but not necessarily all at the same time):
>
> 1 - don't use your domain name when logging in. You are already
> specifying a domain in your SSPI configuration.
>
> 2 - Add your domain name in front of your username in your AUTHZ file.
>
> 3 - Uncomment the SSPIOmitDomain directive. If the domain is provided on
> the front end, this should strip it off and provide the name only to the
> authentication level.
>
> m2c
>
> Regards,
> Frank
>
--
Deepak Balasubramaniam
408-571-9196
____________________________________________________________
"Experience is the name everyone gives to their mistakes." --Oscar Wilde
____________________________________________________________
Re: Windows domain authentication error
Posted by Frank Gruman <fg...@verizon.net>.
Deepak Balasubramaniam wrote:
> Hi Kyle,
> Thanks for replying. I tried using the format you specified but
> still i get the same error.
>
> Regards,
> Deepak
>
>
>
> On 12/7/05, *Kyle Kline* <kyle.kline@gmail.com
> <ma...@gmail.com>> wrote:
>
> if the name of your repo is truly svntest, then the perm entry
> should look like this:
> [svntest:/]
> Deepak.B = rw
>
>
>
> On 12/7/05, *Deepak Balasubramaniam *<
> deepakbalasubramaniam@gmail.com
> <ma...@gmail.com>> wrote:
>
> Hi All,
> We are currently in the process of migrating our Version
> management from VSS to SVN. I was trying to setup the windows
> domain authentication for SVN and followed all the steps
> mentioned at http://www.subversionary.org/sspidomainauth. But
> when i try to access the repository i get an Authenticantion
> denied error. I have given the info from apache error.log
> below. We have installed apache 2.0.55 and SVN 1.2.3 .
>
> The entry i have in apache conf file is:
>
> <Location "/test">
> dav svn
> SVNPath "d:/svntest"
>
> # our user authentication policy
> AuthName "SVN Server"
> AuthType SSPI
> SSPIAuth On
> SSPIAuthoritative On
> SSPIDomain nazcasolutions
> SSPIOfferBasic on #let non-IE clients authenticate
> #SSPIOmitDomain On # keep domain name in userid string
> # passed down to mod_authz_svn
> Require valid-user # A Require directive may? prevent userid
> # strings from being passed down to
> mod_authz_svn
>
> # our access control policy enforced by mod_authz_svn
> AuthzSVNAccessFile "d:/svndav/svnaccess.conf"
>
> </Location>
>
> The entry i have in svnaccess.conf file is:
>
> [test]
> Deepak.B = rw
>
> The error i get in error.log is:
> [Wed Dec 07 12:31:12 2005] [notice] Apache/2.0.55 (Win32)
> SVN/1.2.3 DAV/2 mod_auth_sspi/1.0.3 configured -- resuming
> normal operations
> [Wed Dec 07 12:31:12 2005] [notice] Server built: Oct 9 2005
> 19:16:56
> [Wed Dec 07 12:31:12 2005] [notice] Parent: Created child
> process 3732
> [Wed Dec 07 12:31:12 2005] [notice] Child 3732: Child process
> is running
> [Wed Dec 07 12:31:13 2005] [notice] Child 448: Released the
> start mutex
> [Wed Dec 07 12:31:13 2005] [notice] Child 3732: Acquired the
> start mutex.
> [Wed Dec 07 12:31:13 2005] [notice] Child 3732: Starting 250
> worker threads.
> [Wed Dec 07 12:31:14 2005] [notice] Child 448: Waiting for 250
> worker threads to exit.
> [Wed Dec 07 12:31:14 2005] [notice] Child 448: All worker
> threads have exited.
> [Wed Dec 07 12:31:14 2005] [notice] Child 448: Child process
> is exiting
> [Wed Dec 07 12:48:05 2005] [error] [client 10.1.1.102
> <http://10.1.1.102/>] Access denied:
> 'nazcasolutions\\Deepak.B' PROPFIND test:/trunk
>
>
>
Try one of these things (but not necessarily all at the same time):
1 - don't use your domain name when logging in. You are already
specifying a domain in your SSPI configuration.
2 - Add your domain name in front of your username in your AUTHZ file.
3 - Uncomment the SSPIOmitDomain directive. If the domain is provided
on the front end, this should strip it off and provide the name only to
the authentication level.
m2c
Regards,
Frank
Re: Windows domain authentication error
Posted by Deepak Balasubramaniam <de...@gmail.com>.
Hi Kyle,
Thanks for replying. I tried using the format you specified but still i
get the same error.
Regards,
Deepak
On 12/7/05, Kyle Kline <ky...@gmail.com> wrote:
>
> if the name of your repo is truly svntest, then the perm entry should look
> like this:
> [svntest:/]
> Deepak.B = rw
>
>
> On 12/7/05, Deepak Balasubramaniam <de...@gmail.com>
> wrote:
> >
> > Hi All,
> > We are currently in the process of migrating our Version management
> > from VSS to SVN. I was trying to setup the windows domain authentication for
> > SVN and followed all the steps mentioned at
> > http://www.subversionary.org/sspidomainauth. But when i try to access
> > the repository i get an Authenticantion denied error. I have given the info
> > from apache error.log below. We have installed apache 2.0.55 and SVN
> > 1.2.3 .
> >
> > The entry i have in apache conf file is:
> >
> > <Location "/test">
> > dav svn
> > SVNPath "d:/svntest"
> >
> > # our user authentication policy
> > AuthName "SVN Server"
> > AuthType SSPI
> > SSPIAuth On
> > SSPIAuthoritative On
> > SSPIDomain nazcasolutions
> > SSPIOfferBasic on #let non-IE clients authenticate
> > #SSPIOmitDomain On # keep domain name in userid string
> > # passed down to mod_authz_svn
> > Require valid-user # A Require directive may? prevent userid
> > # strings from being passed down to
> > mod_authz_svn
> >
> > # our access control policy enforced by mod_authz_svn
> > AuthzSVNAccessFile "d:/svndav/svnaccess.conf"
> >
> > </Location>
> >
> > The entry i have in svnaccess.conf file is:
> >
> > [test]
> > Deepak.B = rw
> > The error i get in error.log is:
> > [Wed Dec 07 12:31:12 2005] [notice] Apache/2.0.55 (Win32) SVN/1.2.3
> > DAV/2 mod_auth_sspi/1.0.3 configured -- resuming normal operations
> > [Wed Dec 07 12:31:12 2005] [notice] Server built: Oct 9 2005 19:16:56
> > [Wed Dec 07 12:31:12 2005] [notice] Parent: Created child process 3732
> > [Wed Dec 07 12:31:12 2005] [notice] Child 3732: Child process is running
> > [Wed Dec 07 12:31:13 2005] [notice] Child 448: Released the start mutex
> > [Wed Dec 07 12:31:13 2005] [notice] Child 3732: Acquired the start
> > mutex.
> > [Wed Dec 07 12:31:13 2005] [notice] Child 3732: Starting 250 worker
> > threads.
> > [Wed Dec 07 12:31:14 2005] [notice] Child 448: Waiting for 250 worker
> > threads to exit.
> > [Wed Dec 07 12:31:14 2005] [notice] Child 448: All worker threads have
> > exited.
> > [Wed Dec 07 12:31:14 2005] [notice] Child 448: Child process is exiting
> > [Wed Dec 07 12:48:05 2005] [error] [client 10.1.1.102] Access denied:
> > 'nazcasolutions\\Deepak.B' PROPFIND test:/trunk
> >
> >
> > I also tried using different combinations of lower and upper cases for
> > username and domain. But none of them worked.
> > Can someone please help me with a resolution?
> >
> > Thanks and Regards,
> > Deepak
> >
> >
> >
> >
> > --
> > Deepak Balasubramaniam
> > 408-571-9196
> > ____________________________________________________________
> > "Experience is the name everyone gives to their mistakes." --Oscar Wilde
> > ____________________________________________________________
> >
> >
>
>
--
Deepak Balasubramaniam
408-571-9196
____________________________________________________________
"Experience is the name everyone gives to their mistakes." --Oscar Wilde
____________________________________________________________
Re: Windows domain authentication error
Posted by Kyle Kline <ky...@gmail.com>.
if the name of your repo is truly svntest, then the perm entry should look
like this:
[svntest:/]
Deepak.B = rw
On 12/7/05, Deepak Balasubramaniam <de...@gmail.com> wrote:
>
> Hi All,
> We are currently in the process of migrating our Version management
> from VSS to SVN. I was trying to setup the windows domain authentication for
> SVN and followed all the steps mentioned at
> http://www.subversionary.org/sspidomainauth. But when i try to access the
> repository i get an Authenticantion denied error. I have given the info from
> apache error.log below. We have installed apache 2.0.55 and SVN 1.2.3 .
>
> The entry i have in apache conf file is:
>
> <Location "/test">
> dav svn
> SVNPath "d:/svntest"
>
> # our user authentication policy
> AuthName "SVN Server"
> AuthType SSPI
> SSPIAuth On
> SSPIAuthoritative On
> SSPIDomain nazcasolutions
> SSPIOfferBasic on #let non-IE clients authenticate
> #SSPIOmitDomain On # keep domain name in userid string
> # passed down to mod_authz_svn
> Require valid-user # A Require directive may? prevent userid
> # strings from being passed down to mod_authz_svn
>
> # our access control policy enforced by mod_authz_svn
> AuthzSVNAccessFile "d:/svndav/svnaccess.conf"
>
> </Location>
>
> The entry i have in svnaccess.conf file is:
>
> [test]
> Deepak.B = rw
> The error i get in error.log is:
> [Wed Dec 07 12:31:12 2005] [notice] Apache/2.0.55 (Win32) SVN/1.2.3 DAV/2
> mod_auth_sspi/1.0.3 configured -- resuming normal operations
> [Wed Dec 07 12:31:12 2005] [notice] Server built: Oct 9 2005 19:16:56
> [Wed Dec 07 12:31:12 2005] [notice] Parent: Created child process 3732
> [Wed Dec 07 12:31:12 2005] [notice] Child 3732: Child process is running
> [Wed Dec 07 12:31:13 2005] [notice] Child 448: Released the start mutex
> [Wed Dec 07 12:31:13 2005] [notice] Child 3732: Acquired the start mutex.
> [Wed Dec 07 12:31:13 2005] [notice] Child 3732: Starting 250 worker
> threads.
> [Wed Dec 07 12:31:14 2005] [notice] Child 448: Waiting for 250 worker
> threads to exit.
> [Wed Dec 07 12:31:14 2005] [notice] Child 448: All worker threads have
> exited.
> [Wed Dec 07 12:31:14 2005] [notice] Child 448: Child process is exiting
> [Wed Dec 07 12:48:05 2005] [error] [client 10.1.1.102] Access denied:
> 'nazcasolutions\\Deepak.B' PROPFIND test:/trunk
>
>
> I also tried using different combinations of lower and upper cases for
> username and domain. But none of them worked.
> Can someone please help me with a resolution?
>
> Thanks and Regards,
> Deepak
>
>
>
>
> --
> Deepak Balasubramaniam
> 408-571-9196
> ____________________________________________________________
> "Experience is the name everyone gives to their mistakes." --Oscar Wilde
> ____________________________________________________________
>
>