You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Simon Large <si...@googlemail.com> on 2008/03/28 09:31:16 UTC
Using SASL on a Windows server
Hi folks,
TortoiseSVN 1.5.0 beta is built with SASL support and the nightly svn
book now recommends using this as the preferred way to secure svn://
communications over the big bad internet. In the TortoiseSVN docs we
like to include instructions for setting up a server on a Windows box
since many small companies are stuck with a single Windows server.
However, reading the notes at
<http://svn.collab.net/repos/svn/trunk/notes/sasl.txt> does not make
it clear how you would setup/install SASL support for svnserve on a
Windows svn server, nor do the Cyrus docs themselves.
The implication is that you need to build Cyrus SASL in order to get
the required plugins to work with the pre-built svn binaries, and that
you also need to compile the utilities such as saslpasswd2. For
Windows sysadmins that is likely to be a problem (programs are built
by developers, not by users) and even if you could do that, you would
have to use the same compiler version as was used to build subversion
to avoid the infamous dll hell.
So, my question is: will subversion 1.5 Windows binaries also ship
with the required Cyrus SASL plugins and utilities, is it a feature
that just can't be used on a Windows server, or have I just got it all
horribly wrong?
Thanks,
Simon
--
___
oo // \\ "De Chelonian Mobile"
(_,\/ \_/ \ TortoiseSVN
\ \_/_\_/> The coolest Interface to (Sub)Version Control
/_/ \_\ http://tortoisesvn.net
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: Using SASL on a Windows server
Posted by Simon Large <si...@googlemail.com>.
On 28/03/2008, Simon Large <si...@googlemail.com> wrote:
> On 28/03/2008, Mark Phippard <ma...@gmail.com> wrote:
> > On Fri, Mar 28, 2008 at 1:25 PM, Simon Large
> >
> > <si...@googlemail.com> wrote:
> > >
> > > On 28/03/2008, Mark Phippard <ma...@gmail.com> wrote:
> > > > On Fri, Mar 28, 2008 at 5:31 AM, Simon Large
> > > > <si...@googlemail.com> wrote:
> > > >
> > > > > TortoiseSVN 1.5.0 beta is built with SASL support and the nightly svn
> > > > > book now recommends using this as the preferred way to secure svn://
> > > > > communications over the big bad internet. In the TortoiseSVN docs we
> > > > > like to include instructions for setting up a server on a Windows box
> > > > > since many small companies are stuck with a single Windows server.
> > > > > However, reading the notes at
> > > > > <http://svn.collab.net/repos/svn/trunk/notes/sasl.txt> does not make
> > > > > it clear how you would setup/install SASL support for svnserve on a
> > > > > Windows svn server, nor do the Cyrus docs themselves.
> > > > >
> > > > > The implication is that you need to build Cyrus SASL in order to get
> > > > > the required plugins to work with the pre-built svn binaries, and that
> > > > > you also need to compile the utilities such as saslpasswd2. For
> > > > > Windows sysadmins that is likely to be a problem (programs are built
> > > > > by developers, not by users) and even if you could do that, you would
> > > > > have to use the same compiler version as was used to build subversion
> > > > > to avoid the infamous dll hell.
> > > > >
> > > > > So, my question is: will subversion 1.5 Windows binaries also ship
> > > > > with the required Cyrus SASL plugins and utilities, is it a feature
> > > > > that just can't be used on a Windows server, or have I just got it all
> > > > > horribly wrong?
> > > >
> > > >
> > > > The CollabNet Subversion binaries posted in the SVN 1.5 beta site on
> > > > OCN include the SASL plugins and utilities. Please give the server
> > > > install a try and see if you can get it working. I think you should
> > > > just have to add the SASL config to svnserve.conf, and of course use
> > > > the SASL tools to create a few users. Please post to the OCN forums
> > > > if you have problems so that I do not miss your message.
> > >
> > > OK, I installed the 1.5 beta from OCN and followed the options for
> > > svnserve as service (no apache). I now have svnserve running, but
> > > there is no sign of the SASL tools in the OCN install folder or
> > > anywhere else obvious.
> >
> >
> > When I did it the SASL tools were installed in the main folder and
> > there was also a SASL plugins folder installed. I installed
> > everything when I did it. Perhaps the programs are incorrectly tied
> > to selecting the Apache server? If you do not see them try
> > uninstalling and then do it again where you select everything. Just
> > do not install Apache as a service.
>
>
> Yep, that fixed it thanks. It seems they are indeed tied to the wrong
> server type. I'll let you know how I get on.
I still haven't had time to try getting SASL going, but 2 things I
notice with the installation:
1. "saslpasswd2 --help" runs OK but "sasldblistusers2 --help" always
fails to run with the error message "This application has failed to
start because saslSASLDB.dll was not found. Re-installing the
application may fix this problem."
2. The svn-book.pdf included is V1.3 - should be 1.4 I think.
Simon
--
___
oo // \\ "De Chelonian Mobile"
(_,\/ \_/ \ TortoiseSVN
\ \_/_\_/> The coolest Interface to (Sub)Version Control
/_/ \_\ http://tortoisesvn.net
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: Using SASL on a Windows server
Posted by Simon Large <si...@googlemail.com>.
On 28/03/2008, Mark Phippard <ma...@gmail.com> wrote:
> On Fri, Mar 28, 2008 at 1:25 PM, Simon Large
>
> <si...@googlemail.com> wrote:
> >
> > On 28/03/2008, Mark Phippard <ma...@gmail.com> wrote:
> > > On Fri, Mar 28, 2008 at 5:31 AM, Simon Large
> > > <si...@googlemail.com> wrote:
> > >
> > > > TortoiseSVN 1.5.0 beta is built with SASL support and the nightly svn
> > > > book now recommends using this as the preferred way to secure svn://
> > > > communications over the big bad internet. In the TortoiseSVN docs we
> > > > like to include instructions for setting up a server on a Windows box
> > > > since many small companies are stuck with a single Windows server.
> > > > However, reading the notes at
> > > > <http://svn.collab.net/repos/svn/trunk/notes/sasl.txt> does not make
> > > > it clear how you would setup/install SASL support for svnserve on a
> > > > Windows svn server, nor do the Cyrus docs themselves.
> > > >
> > > > The implication is that you need to build Cyrus SASL in order to get
> > > > the required plugins to work with the pre-built svn binaries, and that
> > > > you also need to compile the utilities such as saslpasswd2. For
> > > > Windows sysadmins that is likely to be a problem (programs are built
> > > > by developers, not by users) and even if you could do that, you would
> > > > have to use the same compiler version as was used to build subversion
> > > > to avoid the infamous dll hell.
> > > >
> > > > So, my question is: will subversion 1.5 Windows binaries also ship
> > > > with the required Cyrus SASL plugins and utilities, is it a feature
> > > > that just can't be used on a Windows server, or have I just got it all
> > > > horribly wrong?
> > >
> > >
> > > The CollabNet Subversion binaries posted in the SVN 1.5 beta site on
> > > OCN include the SASL plugins and utilities. Please give the server
> > > install a try and see if you can get it working. I think you should
> > > just have to add the SASL config to svnserve.conf, and of course use
> > > the SASL tools to create a few users. Please post to the OCN forums
> > > if you have problems so that I do not miss your message.
> >
> > OK, I installed the 1.5 beta from OCN and followed the options for
> > svnserve as service (no apache). I now have svnserve running, but
> > there is no sign of the SASL tools in the OCN install folder or
> > anywhere else obvious.
>
>
> When I did it the SASL tools were installed in the main folder and
> there was also a SASL plugins folder installed. I installed
> everything when I did it. Perhaps the programs are incorrectly tied
> to selecting the Apache server? If you do not see them try
> uninstalling and then do it again where you select everything. Just
> do not install Apache as a service.
Yep, that fixed it thanks. It seems they are indeed tied to the wrong
server type. I'll let you know how I get on.
Simon
--
___
oo // \\ "De Chelonian Mobile"
(_,\/ \_/ \ TortoiseSVN
\ \_/_\_/> The coolest Interface to (Sub)Version Control
/_/ \_\ http://tortoisesvn.net
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: Using SASL on a Windows server
Posted by Mark Phippard <ma...@gmail.com>.
On Fri, Mar 28, 2008 at 1:25 PM, Simon Large
<si...@googlemail.com> wrote:
>
> On 28/03/2008, Mark Phippard <ma...@gmail.com> wrote:
> > On Fri, Mar 28, 2008 at 5:31 AM, Simon Large
> > <si...@googlemail.com> wrote:
> >
> > > TortoiseSVN 1.5.0 beta is built with SASL support and the nightly svn
> > > book now recommends using this as the preferred way to secure svn://
> > > communications over the big bad internet. In the TortoiseSVN docs we
> > > like to include instructions for setting up a server on a Windows box
> > > since many small companies are stuck with a single Windows server.
> > > However, reading the notes at
> > > <http://svn.collab.net/repos/svn/trunk/notes/sasl.txt> does not make
> > > it clear how you would setup/install SASL support for svnserve on a
> > > Windows svn server, nor do the Cyrus docs themselves.
> > >
> > > The implication is that you need to build Cyrus SASL in order to get
> > > the required plugins to work with the pre-built svn binaries, and that
> > > you also need to compile the utilities such as saslpasswd2. For
> > > Windows sysadmins that is likely to be a problem (programs are built
> > > by developers, not by users) and even if you could do that, you would
> > > have to use the same compiler version as was used to build subversion
> > > to avoid the infamous dll hell.
> > >
> > > So, my question is: will subversion 1.5 Windows binaries also ship
> > > with the required Cyrus SASL plugins and utilities, is it a feature
> > > that just can't be used on a Windows server, or have I just got it all
> > > horribly wrong?
> >
> >
> > The CollabNet Subversion binaries posted in the SVN 1.5 beta site on
> > OCN include the SASL plugins and utilities. Please give the server
> > install a try and see if you can get it working. I think you should
> > just have to add the SASL config to svnserve.conf, and of course use
> > the SASL tools to create a few users. Please post to the OCN forums
> > if you have problems so that I do not miss your message.
>
> OK, I installed the 1.5 beta from OCN and followed the options for
> svnserve as service (no apache). I now have svnserve running, but
> there is no sign of the SASL tools in the OCN install folder or
> anywhere else obvious.
When I did it the SASL tools were installed in the main folder and
there was also a SASL plugins folder installed. I installed
everything when I did it. Perhaps the programs are incorrectly tied
to selecting the Apache server? If you do not see them try
uninstalling and then do it again where you select everything. Just
do not install Apache as a service.
--
Thanks
Mark Phippard
http://markphip.blogspot.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: Using SASL on a Windows server
Posted by Simon Large <si...@googlemail.com>.
On 28/03/2008, Mark Phippard <ma...@gmail.com> wrote:
> On Fri, Mar 28, 2008 at 5:31 AM, Simon Large
> <si...@googlemail.com> wrote:
>
> > TortoiseSVN 1.5.0 beta is built with SASL support and the nightly svn
> > book now recommends using this as the preferred way to secure svn://
> > communications over the big bad internet. In the TortoiseSVN docs we
> > like to include instructions for setting up a server on a Windows box
> > since many small companies are stuck with a single Windows server.
> > However, reading the notes at
> > <http://svn.collab.net/repos/svn/trunk/notes/sasl.txt> does not make
> > it clear how you would setup/install SASL support for svnserve on a
> > Windows svn server, nor do the Cyrus docs themselves.
> >
> > The implication is that you need to build Cyrus SASL in order to get
> > the required plugins to work with the pre-built svn binaries, and that
> > you also need to compile the utilities such as saslpasswd2. For
> > Windows sysadmins that is likely to be a problem (programs are built
> > by developers, not by users) and even if you could do that, you would
> > have to use the same compiler version as was used to build subversion
> > to avoid the infamous dll hell.
> >
> > So, my question is: will subversion 1.5 Windows binaries also ship
> > with the required Cyrus SASL plugins and utilities, is it a feature
> > that just can't be used on a Windows server, or have I just got it all
> > horribly wrong?
>
>
> The CollabNet Subversion binaries posted in the SVN 1.5 beta site on
> OCN include the SASL plugins and utilities. Please give the server
> install a try and see if you can get it working. I think you should
> just have to add the SASL config to svnserve.conf, and of course use
> the SASL tools to create a few users. Please post to the OCN forums
> if you have problems so that I do not miss your message.
OK, I installed the 1.5 beta from OCN and followed the options for
svnserve as service (no apache). I now have svnserve running, but
there is no sign of the SASL tools in the OCN install folder or
anywhere else obvious.
Simon
--
___
oo // \\ "De Chelonian Mobile"
(_,\/ \_/ \ TortoiseSVN
\ \_/_\_/> The coolest Interface to (Sub)Version Control
/_/ \_\ http://tortoisesvn.net
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: Using SASL on a Windows server
Posted by Mark Phippard <ma...@gmail.com>.
On Fri, Mar 28, 2008 at 5:31 AM, Simon Large
<si...@googlemail.com> wrote:
> TortoiseSVN 1.5.0 beta is built with SASL support and the nightly svn
> book now recommends using this as the preferred way to secure svn://
> communications over the big bad internet. In the TortoiseSVN docs we
> like to include instructions for setting up a server on a Windows box
> since many small companies are stuck with a single Windows server.
> However, reading the notes at
> <http://svn.collab.net/repos/svn/trunk/notes/sasl.txt> does not make
> it clear how you would setup/install SASL support for svnserve on a
> Windows svn server, nor do the Cyrus docs themselves.
>
> The implication is that you need to build Cyrus SASL in order to get
> the required plugins to work with the pre-built svn binaries, and that
> you also need to compile the utilities such as saslpasswd2. For
> Windows sysadmins that is likely to be a problem (programs are built
> by developers, not by users) and even if you could do that, you would
> have to use the same compiler version as was used to build subversion
> to avoid the infamous dll hell.
>
> So, my question is: will subversion 1.5 Windows binaries also ship
> with the required Cyrus SASL plugins and utilities, is it a feature
> that just can't be used on a Windows server, or have I just got it all
> horribly wrong?
The CollabNet Subversion binaries posted in the SVN 1.5 beta site on
OCN include the SASL plugins and utilities. Please give the server
install a try and see if you can get it working. I think you should
just have to add the SASL config to svnserve.conf, and of course use
the SASL tools to create a few users. Please post to the OCN forums
if you have problems so that I do not miss your message.
--
Thanks
Mark Phippard
http://markphip.blogspot.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org