You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@subversion.apache.org by Norbert Unterberg <nu...@gmail.com> on 2006/08/22 07:15:42 UTC

Subversion ignores --username on windows, NTLM/neon prob?

Hi,

The Subversion windows binaries seem to ignore the --username and
--password options. I guess this has to do with neon 0.25.x that
supports NTLM authentication.

There have been some issues about that in the past, including the
suggestion to disable NTLM in neon for subversion. As far as I know,
TortoiseSVN disables NTLM in NEON because of these problems.
I don't know if this is a wanted feature, a problem with NTLM in neon,
or just the way subversion uses neon. Does anyone know the current
state of the research?

Client: Subversion windows installer version 1.3.2, downloaded from
subversion.tigris.org, running on XP Pro.
Server: Subversion 1.3.2 running on Apache 2.0.55 on Windows Server 2003, FSFS

Norbert

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org

Re: Subversion ignores --username on windows, NTLM/neon prob?

Posted by Stefan Küng <to...@gmail.com>.
Norbert Unterberg wrote:

> The Subversion windows binaries seem to ignore the --username and
> --password options. I guess this has to do with neon 0.25.x that
> supports NTLM authentication.

Yes, neon 0.25.x first tries authenticating with NTLM and kerberos, and 
only then (if that fails) falls back to basic authentication. So as long 
as NTML/kerberos authentication succeeds, Subversion never even gets the 
chance to provide username/password.

> There have been some issues about that in the past, including the
> suggestion to disable NTLM in neon for subversion. As far as I know,
> TortoiseSVN disables NTLM in NEON because of these problems.
> I don't know if this is a wanted feature, a problem with NTLM in neon,
> or just the way subversion uses neon. Does anyone know the current
> state of the research?

The only solution to this problem (apart from completely disabling 
NTLM/kerberos authentication during compile time) is to update to neon 
0.26.x, and then change Subversion so that these two authentication 
providers can be disabled (on request or e.g. in the servers file or ...)

Stefan

-- 
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest Interface to (Sub)Version Control
    /_/   \_\     http://tortoisesvn.net

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org