Problems with AuthName when using mod_auth_sspi with SVN & Apache

[Ian Leader <ia...@line.co.uk>]

Hi,

I have just installed mod_auth_sspi on our Subversion server (running under Apache). It works perfectly, except for one thing - when you connect to the subversion repository using IE, on a machine that isn't logged into the windows domain that Apache is set to authenticate against, no realm (AuthName) appears on the login dialog box. The problem with this is that even if you check the 'Save Password' box, IE does not save your password, only your user name.

Perhaps the AuthName directive is not supported by mod_auth_SSPI? - but I have seen it in several sample config files for mod_auth_sspi.

I've searched various mailing lists and checked the TortoiseSVN stuff on SSPI, but I can't find any answers.

Any suggestions much appreciated

Thanks,

Ian.

###

The details (All URLs for reference only - this is an internal server):

The behaviour of the client depends on the URL I enter:

- For a machine on the HQ domain, using IE 6, if I go to http://adminws07:9876/svn/Test it logs me in transparently - i.e. no username/password prompt

- For a machine on the HQ domain, using IE 6, if I go to http://adminws07.hq.line.co.uk:9876/svn/Test it prompts me to enter username/domain/password in a three text field dialog box - if I tell it to remember my username and password, next time I start IE and go to this page, it does.

- For a machine that is NOT on the HQ domain, using IE 6, if I go to second of the above URLs, it prompts me to enter username/password in a two text field dialog box. When enter my user name in the form domain\user, it works fine. However, if I ask it to remember my username and password it only remembers the username, not the password.

In the 2nd and 3rd case, the login dialog does NOT show the 'Realm' name specified in the AuthName directive.

Apache/2.0.48 (Win32) mod_auth_sspi/1.0.1 DAV/2 SVN/0.37.0 PHP/4.3.6 Server at adminws07.hq.line.co.uk Port 9876

Running on Windows 2000 5.00.2951 SP4

Extract from apache conf file:

<Location /svn>
	DAV svn
	SVNParentPath C:\data\svn

	#AuthType Basic
	#AuthName "Subversion repository"
	#AuthUserFile "C:\Program Files\Apache Group\Apache2\conf\svn-auth-file"


	AuthType SSPI
	AuthName "Subversion Repository"
	SSPIOfferSSPI On
	SSPIAuth On
	SSPIAuthoritative On
	SSPIOfferBasic On
	SSPIDomain HQ
	
	#SSPIPackage "SVN Repository IL"
	#SSPIDomain HQ	
	#SSPIMSIE3Hack On

	#SVNIndexXSLT "/xslt/svnindex.xsl"

	Require valid-user
</Location>



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: Problems with AuthName when using mod_auth_sspi with SVN & Apache

[Nathan Kidd <na...@spicycrypto.ca>]

I reply to this nearly-two-year-old message because it turned up in my 
recent search to solve the exact same problem, and I really wished that 
a there'd been a reply pointing in the right direction.

Ian Leader wrote:
> I have just installed mod_auth_sspi on our Subversion server (running
>  under Apache). It works perfectly, except for one thing 
...
> no realm (AuthName) appears on the login dialog  box. 
...
> Extract from apache conf file:
> 
> <Location /svn>
> 	DAV svn
> 	SVNParentPath C:\data\svn
> 
> 	AuthType SSPI
> 	AuthName "Subversion Repository"
> 	SSPIOfferSSPI On
> 	SSPIAuth On
> 	SSPIAuthoritative On
> 	SSPIOfferBasic On
> 	SSPIDomain HQ
> 	Require valid-user
> </Location>

Look at the "SSPIBasicPreferred On" directive and comments/links in
http://projects.edgewall.com/trac/ticket/1168

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org