You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Ahmed Reza <ah...@gmail.com> on 2006/06/23 14:30:57 UTC
Wierdest Bug I've seen!
Hello all, Looked at this long and hard, thought about it for quite a while
too, but it just doesn't make sense to me. Ok, so I have a subversion
server running Apache 2.0.55 and SSPI 1.0.4. Now everything works fine when
I'm logged in to my windows machine here at work. I can checkout, check-in,
Tag/Branch etc etc. Now, one of my coworkers complained about PROPFIND
errors and MKACTIVITY errors. Here comes the realy wierd part. If I have
my co-worker log into my machine and do a branching/tagging operation on a
subversion repo, he gets an error. Even when I authenticate with the SVN
server with my account name and password, it still fails. It lets you check
out and authenticates with SSPI just fine! If my co-worker logs off and I
log-in to my machine and we try the exact same operation, everything works
flawlessly with (both his and my log-in ids when dealing with subversion)!
Below is the apache configuration on a repository:
BEFORE:
<Location "/Software/Testing">
DAV svn
SVNListParentPath on
SVNParentPath E:\Software\Testing
SVNPathAuthz off
AuthType SSPI
SSPIAuth On
SSPIAuthoritative On
SSPIDomain SC2K3PDC
SSPIOfferBasic on
AuthzSVNAccessFile svnaccessfile
Require valid-user
</Location>
We figured out that by commenting out the "AuthzSVNAccessFile" line we
eliminated the MKActivity & Propfind errors, althought we no longer have any
real access control. Here's what it looks like now:
<Location "/Software/Testing">
DAV svn
SVNListParentPath on
SVNParentPath E:\Software\Testing
SVNPathAuthz off
AuthType SSPI
SSPIAuth On
SSPIAuthoritative On
SSPIDomain SC2K3PDC
SSPIOfferBasic on
# AuthzSVNAccessFile svnaccessfile
Require valid-user
</Location>
This is really weird since you can go thru the authentication just fine and
checkout/checkin your work but just on certain operations, there are
MKActivity & Propfind errors; and only when a certain user is logged into
windows with his accountname, if he uses my acccountname in windows, and
then accesses the server and provides his own security credentials,
everything works! Has anybody seen anything like this? What the heck! Any
input would be deeply appreciated!
Regards,
Ahmed
Re: Wierdest Bug I've seen!
Posted by "D.J. Heap" <dj...@gmail.com>.
On 6/23/06, Ahmed Reza <ah...@gmail.com> wrote:
> Hello all, Looked at this long and hard, thought about it for quite a while
> too, but it just doesn't make sense to me. Ok, so I have a subversion
> server running Apache 2.0.55 and SSPI 1.0.4. Now everything works fine when
> I'm logged in to my windows machine here at work. I can checkout, check-in,
> Tag/Branch etc etc. Now, one of my coworkers complained about PROPFIND
> errors and MKACTIVITY errors. Here comes the realy wierd part. If I have
> my co-worker log into my machine and do a branching/tagging operation on a
> subversion repo, he gets an error. Even when I authenticate with the SVN
> server with my account name and password, it still fails. It lets you check
> out and authenticates with SSPI just fine! If my co-worker logs off and I
> log-in to my machine and we try the exact same operation, everything works
> flawlessly with (both his and my log-in ids when dealing with subversion)!
> Below is the apache configuration on a repository:
>
> BEFORE:
>
> <Location "/Software/Testing">
> DAV svn
> SVNListParentPath on
> SVNParentPath E:\Software\Testing
> SVNPathAuthz off
> AuthType SSPI
> SSPIAuth On
> SSPIAuthoritative On
> SSPIDomain SC2K3PDC
> SSPIOfferBasic on
> AuthzSVNAccessFile svnaccessfile
> Require valid-user
> </Location>
>
> We figured out that by commenting out the "AuthzSVNAccessFile" line we
> eliminated the MKActivity & Propfind errors, althought we no longer have any
> real access control. Here's what it looks like now:
>
> <Location "/Software/Testing">
> DAV svn
> SVNListParentPath on
> SVNParentPath E:\Software\Testing
> SVNPathAuthz off
> AuthType SSPI
> SSPIAuth On
> SSPIAuthoritative On
> SSPIDomain SC2K3PDC
> SSPIOfferBasic on
> # AuthzSVNAccessFile svnaccessfile
> Require valid-user
> </Location>
>
> This is really weird since you can go thru the authentication just fine and
> checkout/checkin your work but just on certain operations, there are
> MKActivity & Propfind errors; and only when a certain user is logged into
> windows with his accountname, if he uses my acccountname in windows, and
> then accesses the server and provides his own security credentials,
> everything works! Has anybody seen anything like this? What the heck! Any
> input would be deeply appreciated!
>
> Regards,
> Ahmed
>
If no one else here can help, you might try asking over on the TSVN
list -- they probably have more users with experience on the SSPI auth
features.
DJ
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: Wierdest Bug I've seen!
Posted by Ahmed Reza <ah...@gmail.com>.
Thanks everyone for all the help. The probem was actually fixed, thanks to
Jason. After taking his advice (use SSPIUsernameCase), my problem was
suddenly gone. It turns out that the person whose login was a problem, had
upper & lower case in his username whereas mine was all lower case.
Hopefully this helps someone else who runs into this wierd problem! Thanks
again (especially Jason)!
Regards,
Ahmed
On 6/26/06, Eric Lemes <er...@gmail.com> wrote:
>
> Ahmed,
>
> The URL used for checkout is in the correct name (case-sensitive issue)?
>
> If you create a repository TEST, give access in the SVNAccessFile for
> TEST, svn let's you do the checkout from http://yourserver/svn/test. In
> the moment of the commit, the access problem is given. Try to relocate your
> working copy (note that TortoiseSVN always change the URL to the one you
> typed in the first time. You'll need to type it twice).
>
> I didn't find a way to prevent the user from checkouting in wrong case.
>
>
> Eric
>
> On 6/23/06, Ahmed Reza <ah...@gmail.com> wrote:
>
> > Hello all, Looked at this long and hard, thought about it for quite a
> > while too, but it just doesn't make sense to me. Ok, so I have a subversion
> > server running Apache 2.0.55 and SSPI 1.0.4. Now everything works fine
> > when I'm logged in to my windows machine here at work. I can checkout,
> > check-in, Tag/Branch etc etc. Now, one of my coworkers complained about
> > PROPFIND errors and MKACTIVITY errors. Here comes the realy wierd part. If
> > I have my co-worker log into my machine and do a branching/tagging operation
> > on a subversion repo, he gets an error. Even when I authenticate with the
> > SVN server with my account name and password, it still fails. It lets you
> > check out and authenticates with SSPI just fine! If my co-worker logs off
> > and I log-in to my machine and we try the exact same operation, everything
> > works flawlessly with (both his and my log-in ids when dealing with
> > subversion)! Below is the apache configuration on a repository:
> >
> > BEFORE:
> >
> > <Location "/Software/Testing">
> > DAV svn
> > SVNListParentPath on
> > SVNParentPath E:\Software\Testing
> > SVNPathAuthz off
> > AuthType SSPI
> > SSPIAuth On
> > SSPIAuthoritative On
> > SSPIDomain SC2K3PDC
> > SSPIOfferBasic on
> > AuthzSVNAccessFile svnaccessfile
> > Require valid-user
> > </Location>
> >
> > We figured out that by commenting out the "AuthzSVNAccessFile" line we
> > eliminated the MKActivity & Propfind errors, althought we no longer have any
> > real access control. Here's what it looks like now:
> >
> > <Location "/Software/Testing">
> > DAV svn
> > SVNListParentPath on
> > SVNParentPath E:\Software\Testing
> > SVNPathAuthz off
> > AuthType SSPI
> > SSPIAuth On
> > SSPIAuthoritative On
> > SSPIDomain SC2K3PDC
> > SSPIOfferBasic on
> > # AuthzSVNAccessFile svnaccessfile
> > Require valid-user
> > </Location>
> >
> > This is really weird since you can go thru the authentication just fine
> > and checkout/checkin your work but just on certain operations, there are
> > MKActivity & Propfind errors; and only when a certain user is logged into
> > windows with his accountname, if he uses my acccountname in windows, and
> > then accesses the server and provides his own security credentials,
> > everything works! Has anybody seen anything like this? What the heck! Any
> > input would be deeply appreciated!
> >
> > Regards,
> > Ahmed
> >
>
>
Re: Wierdest Bug I've seen!
Posted by Eric Lemes <er...@gmail.com>.
Ahmed,
The URL used for checkout is in the correct name (case-sensitive issue)?
If you create a repository TEST, give access in the SVNAccessFile for TEST,
svn let's you do the checkout from http://yourserver/svn/test. In the moment
of the commit, the access problem is given. Try to relocate your working
copy (note that TortoiseSVN always change the URL to the one you typed in
the first time. You'll need to type it twice).
I didn't find a way to prevent the user from checkouting in wrong case.
Eric
On 6/23/06, Ahmed Reza <ah...@gmail.com> wrote:
>
> Hello all, Looked at this long and hard, thought about it for quite a
> while too, but it just doesn't make sense to me. Ok, so I have a subversion
> server running Apache 2.0.55 and SSPI 1.0.4. Now everything works fine
> when I'm logged in to my windows machine here at work. I can checkout,
> check-in, Tag/Branch etc etc. Now, one of my coworkers complained about
> PROPFIND errors and MKACTIVITY errors. Here comes the realy wierd part. If
> I have my co-worker log into my machine and do a branching/tagging operation
> on a subversion repo, he gets an error. Even when I authenticate with the
> SVN server with my account name and password, it still fails. It lets you
> check out and authenticates with SSPI just fine! If my co-worker logs off
> and I log-in to my machine and we try the exact same operation, everything
> works flawlessly with (both his and my log-in ids when dealing with
> subversion)! Below is the apache configuration on a repository:
>
> BEFORE:
>
> <Location "/Software/Testing">
> DAV svn
> SVNListParentPath on
> SVNParentPath E:\Software\Testing
> SVNPathAuthz off
> AuthType SSPI
> SSPIAuth On
> SSPIAuthoritative On
> SSPIDomain SC2K3PDC
> SSPIOfferBasic on
> AuthzSVNAccessFile svnaccessfile
> Require valid-user
> </Location>
>
> We figured out that by commenting out the "AuthzSVNAccessFile" line we
> eliminated the MKActivity & Propfind errors, althought we no longer have any
> real access control. Here's what it looks like now:
>
> <Location "/Software/Testing">
> DAV svn
> SVNListParentPath on
> SVNParentPath E:\Software\Testing
> SVNPathAuthz off
> AuthType SSPI
> SSPIAuth On
> SSPIAuthoritative On
> SSPIDomain SC2K3PDC
> SSPIOfferBasic on
> # AuthzSVNAccessFile svnaccessfile
> Require valid-user
> </Location>
>
> This is really weird since you can go thru the authentication just fine
> and checkout/checkin your work but just on certain operations, there are
> MKActivity & Propfind errors; and only when a certain user is logged into
> windows with his accountname, if he uses my acccountname in windows, and
> then accesses the server and provides his own security credentials,
> everything works! Has anybody seen anything like this? What the heck! Any
> input would be deeply appreciated!
>
> Regards,
> Ahmed
>