You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Gabor Szabo <sz...@gmail.com> on 2005/05/15 08:57:57 UTC
Browser does not cache credentials
I am not sure if this is a Subversion issue or not but I encounter it
while trying
to setup a new repository.
I have just setup a new repository with 1.2.0.RC4 requireing authentication.
Using svn client (1.1.4) (after authentication) I can check out the
whole tree without a problem and I can even commit changes back to the
repo.
When I try to browse to the repository using Firefox I get the pop-up
window asking for username/password. Once I get through I can see the
main directory but if I try to change
directory, or look at a file in the top directory or even only reload
the browser I get the
pop-up window again asking for username/password.
On other sites using the same browser the credential caching works, I
even setup a
non-svn directory on the same server using different URI using the
same credentials
and that works as expected.
(Same happens both on http and on https)
Any idea why does this happen and how to solve it ?
Gabor
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: Browser does not cache credentials
Posted by Gabor Szabo <sz...@gmail.com>.
On 5/19/05, Matt Griswold <ma...@devit.com> wrote:
> I had the same issue and was able to fix it by allowing read access from the
> root, i.e.,
>
> [/]
> * = r
>
Yes, that seems to do the trick, thanks.
But now users can see each others
repository even though they should be not allowed.
(Anonymous access is actully forbidden to the whole tree)
I had this in my access file:
[/]
* = r
[blue:/]
matt = rw
[green:/]
gabor = rw
and in the Apache config I have
Require valid-user
and I do NOT have Satisfy Any
Users cannot access any of the repositories without authentication
but user "gabor" can read the "blue" repository. This is not what I wanted.
I want to make sure user "gabor" only sees "green"
So I added
* =
to every other entry:
[/]
* = r
[blue:/]
* =
matt = rw
[green:/]
* =
gabor = rw
This seem to work as expected at lest in Firefox.
Do you see any problem with this (besides that is only necessary because
of Firefox ) ?
Gabor
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: Browser does not cache credentials
Posted by Matt Griswold <ma...@devit.com>.
* Gabor Szabo <sz...@gmail.com> 2005/05/15:
> The problematic behavior disappears if I comment out the AuthzSVNAccess= File
> entry from httpd.conf
>
> So it seems like some bug in Firefox but if anyone encountered similar = situation
> I'd appreciate to hear about that.
I had the same issue and was able to fix it by allowing read access from the
root, i.e.,
[/]
* = r
Hopefully that will help you in your situation. I'm guessing (didn't bother
checking into it at all) that authz checks the root first, then declines once
before checking repo perms the 2nd time and firefox is the only one that
prompts the user after one fail.
-Matt
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: Browser does not cache credentials
Posted by Gabor Szabo <sz...@gmail.com>.
On 5/16/05, Moisei <mo...@gmail.com> wrote:
> Hi,
> just the idea: Firefox has it's own password manager.
> Is it possible a wrong credetionals are saved there for the site you
> try to reach?
> Can be viewed under tools\options\privacy\saved passwords
Unfortunately it is not that easy.
Actually the problem is even before I ask Firefox to "remember" my credentials
between sessions. That's what you can see in the "saved passwords"
place as you mentioned.
Normally, once I typed in the correct username/password pair the
browser should not
ask me any more until I restart it and it should send the given
username/password pair
every time the server asks for it.
Gabor
>
> 2005/5/16, Gabor Szabo <sz...@gmail.com>:
> > I still don't have a solution for this.
> > Further research showed that this does not happen when using Konqueror nor with
> > Internet Explorer, only when using Firefox (both on Linux and on Windows).
> >
> > The problematic behavior disappears if I comment out the AuthzSVNAccessFile
> > entry from httpd.conf
> >
> > So it seems like some bug in Firefox but if anyone encountered similar situation
> > I'd appreciate to hear about that.
> >
> > Gabor
> >
> >
> > On 5/15/05, Gabor Szabo <sz...@gmail.com> wrote:
> > > I am not sure if this is a Subversion issue or not but I encounter it
> > > while trying
> > > to setup a new repository.
> > >
> > > I have just setup a new repository with 1.2.0.RC4 requireing authentication.
> > > Using svn client (1.1.4) (after authentication) I can check out the
> > > whole tree without a problem and I can even commit changes back to the
> > > repo.
> > >
> > > When I try to browse to the repository using Firefox I get the pop-up
> > > window asking for username/password. Once I get through I can see the
> > > main directory but if I try to change
> > > directory, or look at a file in the top directory or even only reload
> > > the browser I get the
> > > pop-up window again asking for username/password.
> > >
> > > On other sites using the same browser the credential caching works, I
> > > even setup a
> > > non-svn directory on the same server using different URI using the
> > > same credentials
> > > and that works as expected.
> > >
> > > (Same happens both on http and on https)
> > >
> > > Any idea why does this happen and how to solve it ?
> > >
> > > Gabor
> > >
> >
> > --
> > Gabor Szabo
> > Perl in Israel
> > http://www.pti.co.il
> > 08-975-2897
> > 054-4624648
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > For additional commands, e-mail: users-help@subversion.tigris.org
> >
> >
>
> --
> Best Regards,
> Moisei
>
--
Gabor Szabo
Perl in Israel
http://www.pti.co.il
08-975-2897
054-4624648
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: Browser does not cache credentials
Posted by Moisei <mo...@gmail.com>.
Hi,
just the idea: Firefox has it's own password manager.
Is it possible a wrong credetionals are saved there for the site you
try to reach?
Can be viewed under tools\options\privacy\saved passwords
2005/5/16, Gabor Szabo <sz...@gmail.com>:
> I still don't have a solution for this.
> Further research showed that this does not happen when using Konqueror nor with
> Internet Explorer, only when using Firefox (both on Linux and on Windows).
>
> The problematic behavior disappears if I comment out the AuthzSVNAccessFile
> entry from httpd.conf
>
> So it seems like some bug in Firefox but if anyone encountered similar situation
> I'd appreciate to hear about that.
>
> Gabor
>
>
> On 5/15/05, Gabor Szabo <sz...@gmail.com> wrote:
> > I am not sure if this is a Subversion issue or not but I encounter it
> > while trying
> > to setup a new repository.
> >
> > I have just setup a new repository with 1.2.0.RC4 requireing authentication.
> > Using svn client (1.1.4) (after authentication) I can check out the
> > whole tree without a problem and I can even commit changes back to the
> > repo.
> >
> > When I try to browse to the repository using Firefox I get the pop-up
> > window asking for username/password. Once I get through I can see the
> > main directory but if I try to change
> > directory, or look at a file in the top directory or even only reload
> > the browser I get the
> > pop-up window again asking for username/password.
> >
> > On other sites using the same browser the credential caching works, I
> > even setup a
> > non-svn directory on the same server using different URI using the
> > same credentials
> > and that works as expected.
> >
> > (Same happens both on http and on https)
> >
> > Any idea why does this happen and how to solve it ?
> >
> > Gabor
> >
>
> --
> Gabor Szabo
> Perl in Israel
> http://www.pti.co.il
> 08-975-2897
> 054-4624648
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>
--
Best Regards,
Moisei
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: Browser does not cache credentials
Posted by Gabor Szabo <sz...@gmail.com>.
I still don't have a solution for this.
Further research showed that this does not happen when using Konqueror nor with
Internet Explorer, only when using Firefox (both on Linux and on Windows).
The problematic behavior disappears if I comment out the AuthzSVNAccessFile
entry from httpd.conf
So it seems like some bug in Firefox but if anyone encountered similar situation
I'd appreciate to hear about that.
Gabor
On 5/15/05, Gabor Szabo <sz...@gmail.com> wrote:
> I am not sure if this is a Subversion issue or not but I encounter it
> while trying
> to setup a new repository.
>
> I have just setup a new repository with 1.2.0.RC4 requireing authentication.
> Using svn client (1.1.4) (after authentication) I can check out the
> whole tree without a problem and I can even commit changes back to the
> repo.
>
> When I try to browse to the repository using Firefox I get the pop-up
> window asking for username/password. Once I get through I can see the
> main directory but if I try to change
> directory, or look at a file in the top directory or even only reload
> the browser I get the
> pop-up window again asking for username/password.
>
> On other sites using the same browser the credential caching works, I
> even setup a
> non-svn directory on the same server using different URI using the
> same credentials
> and that works as expected.
>
> (Same happens both on http and on https)
>
> Any idea why does this happen and how to solve it ?
>
> Gabor
>
--
Gabor Szabo
Perl in Israel
http://www.pti.co.il
08-975-2897
054-4624648
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org