You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Jeff Jensen <je...@upstairstechnology.com> on 2006/05/20 04:52:32 UTC
More debug info options than "neon-debug-mask = 130"?
Hi,
Still trying to track down a problem, and need more debug info that subject.
Are there any additional options to get more debug info? I've tried
adjusting the "130" numbers, but don't seem to get more out.
I used TCPMon to inspect the response for any additional peculiarities, but
it is the same is the debug output below.
Particularly, looking for further details on the processing that determines
the "OPTIONS request failed" as shown below.
Sending request-line and headers:
Connecting to (ip address)
Sending request body:
Body block (104 bytes):
[<?xml version="1.0" encoding="utf-8"?><D:options
xmlns:D="DAV:"><D:activity-collection-set/></D:options>]
Request sent; retry is 0.
[status-line] < HTTP/1.1 200 OK
[hdr] Content-Length: 0
Header Name: [content-length], Value: [0]
[hdr] Date: Sat, 20 May 2006 04:44:22 GMT
Header Name: [date], Value: [Sat, 20 May 2006 04:44:22 GMT]
[hdr] Public: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, CONNECT
Header Name: [public], Value: [GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS,
CONNECT]
[hdr] Allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, CONNECT
Header Name: [allow], Value: [GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS,
CONNECT]
[hdr] Cache-Control: private
Header Name: [cache-control], Value: [private]
[hdr]
End of headers.
Request ends, status 200 class 2xx, error line:
200 OK
Running destroy hooks.
Request ends.
svn: Commit failed (details follow):
svn: OPTIONS request failed on '/svn/playground/main'
svn: OPTIONS of '/svn/playground/main': 200 OK (http://www.xxx.com)
ne_session_destroy called.
ne_session_destroy called.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
RE: More debug info options than "neon-debug-mask = 130"?
Posted by Jeff Jensen <je...@upstairstechnology.com>.
For the archives, this MS KB article and patch was needed to solve our ISA
problem:
http://support.microsoft.com/kb/304340/en-us
So there is a bug in the 2000 version of ISA that it fixes. There wasn't
anything configurable that was blocking the requests.
Thank you again for the big help in tracking this down.
> -----Original Message-----
> From: Jeff Jensen [mailto:jeffjensen@upstairstechnology.com]
> Sent: Monday, May 22, 2006 9:56 PM
> To: 'Garrett Rooney'
> Cc: users@subversion.tigris.org
> Subject: RE: More debug info options than "neon-debug-mask = 130"?
>
>
> > -----Original Message-----
> > From: rooneg@gmail.com [mailto:rooneg@gmail.com] On Behalf
> Of Garrett
> > Rooney
> > Sent: Monday, May 22, 2006 9:33 PM
> > To: Jeff Jensen
> > Cc: users@subversion.tigris.org
> > Subject: Re: More debug info options than "neon-debug-mask = 130"?
> >
> > On 5/22/06, Jeff Jensen <je...@upstairstechnology.com> wrote:
> >
> > > Before we blame ISA, does this test also prove that
> nothing on the
> > > Linux server hosting svn is blocking too, or did this
> > tunnel blow by
> > > any of that too?
> >
> > Unless there's a really weird firewall running on your server, I'd
> > suspect that the ISA proxy is your problem.
>
> Thanks a ton for your help! Very much appreciated and needed.
> (Now to determine what to change on ISA. I couldn't see
> today how it was blocking anything!)
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
RE: More debug info options than "neon-debug-mask = 130"?
Posted by Jeff Jensen <je...@upstairstechnology.com>.
> -----Original Message-----
> From: rooneg@gmail.com [mailto:rooneg@gmail.com] On Behalf Of
> Garrett Rooney
> Sent: Monday, May 22, 2006 9:33 PM
> To: Jeff Jensen
> Cc: users@subversion.tigris.org
> Subject: Re: More debug info options than "neon-debug-mask = 130"?
>
> On 5/22/06, Jeff Jensen <je...@upstairstechnology.com> wrote:
>
> > Before we blame ISA, does this test also prove that nothing on the
> > Linux server hosting svn is blocking too, or did this
> tunnel blow by
> > any of that too?
>
> Unless there's a really weird firewall running on your
> server, I'd suspect that the ISA proxy is your problem.
Thanks a ton for your help! Very much appreciated and needed.
(Now to determine what to change on ISA. I couldn't see today how it was
blocking anything!)
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: More debug info options than "neon-debug-mask = 130"?
Posted by Garrett Rooney <ro...@electricjellyfish.net>.
On 5/22/06, Jeff Jensen <je...@upstairstechnology.com> wrote:
> Before we blame ISA, does this test also prove that nothing on the Linux
> server hosting svn is blocking too, or did this tunnel blow by any of that
> too?
Unless there's a really weird firewall running on your server, I'd
suspect that the ISA proxy is your problem.
-garrett
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
RE: More debug info options than "neon-debug-mask = 130"?
Posted by Jeff Jensen <je...@upstairstechnology.com>.
> -----Original Message-----
> From: rooneg@gmail.com [mailto:rooneg@gmail.com] On Behalf Of
> Garrett Rooney
> Sent: Sunday, May 21, 2006 11:23 PM
> To: Jeff Jensen
> Cc: users@subversion.tigris.org
> Subject: Re: More debug info options than "neon-debug-mask = 130"?
>
> On 5/21/06, Jeff Jensen <je...@upstairstechnology.com> wrote:
>
> > Yes, I can ssh to the Linux server svn is on, and that goes
> through ISA.
> > It's how I maintain the server.
> >
> > I infer you mean to try a svn commit over ssh. Just tried
> that, and
> > even the list command doesn't work (not sure if that means I have
> > something else
> > wrong?):
>
> No, I mean something like this:
>
> ssh -L 80:svn.server.hostname.com:80 some.random.host
>
> It'll start an ssh tunnel on port 80 of your local machine,
> and any connection to that port will result in a connection
> being made to svn.server.hostname.com but routed over the
> tunnel to some.random.host, so the connection comes from
> some.random.host, not your local machine. It lets you
> circumvent the proxy server if you ssh to the proper host.
>
> One caveat, if your server is set up under a virtual host you
> might need to make sure you're accessing it via the proper
> hostname, so you could set /etc/hosts so that the remote
> hostname of the server resolves to localhost, then, once
> that's set up and the ssh tunnel is running you just run 'svn
> co http://the.usual.server.name/repos/trunk'
> as normal.
Thank you for the additional tips.
I had to VPN into the network to get past ISA with the tunnel (ISA forwards
the "/svn" context to the Linux server. I don't see how to make the tunnel
work through ISA without the VPN. The straight tunnel to port 80 goes to
the normal web server. I had to tunnel over the VPN directly to the Linux
server).
svn commit through the tunnel works. So you proved for us that something in
the middle is blocking it...thank you :-)
Before we blame ISA, does this test also prove that nothing on the Linux
server hosting svn is blocking too, or did this tunnel blow by any of that
too?
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: More debug info options than "neon-debug-mask = 130"?
Posted by Garrett Rooney <ro...@electricjellyfish.net>.
On 5/21/06, Jeff Jensen <je...@upstairstechnology.com> wrote:
> Yes, I can ssh to the Linux server svn is on, and that goes through ISA.
> It's how I maintain the server.
>
> I infer you mean to try a svn commit over ssh. Just tried that, and even
> the list command doesn't work (not sure if that means I have something else
> wrong?):
No, I mean something like this:
ssh -L 80:svn.server.hostname.com:80 some.random.host
It'll start an ssh tunnel on port 80 of your local machine, and any
connection to that port will result in a connection being made to
svn.server.hostname.com but routed over the tunnel to
some.random.host, so the connection comes from some.random.host, not
your local machine. It lets you circumvent the proxy server if you
ssh to the proper host.
One caveat, if your server is set up under a virtual host you might
need to make sure you're accessing it via the proper hostname, so you
could set /etc/hosts so that the remote hostname of the server
resolves to localhost, then, once that's set up and the ssh tunnel is
running you just run 'svn co http://the.usual.server.name/repos/trunk'
as normal.
-garrett
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: More debug info options than "neon-debug-mask = 130"?
Posted by Nico Kadel-Garcia <nk...@comcast.net>.
Jeff Jensen wrote:
> Yes, I can ssh to the Linux server svn is on, and that goes through
> ISA. It's how I maintain the server.
>
> I infer you mean to try a svn commit over ssh. Just tried that, and
> even the list command doesn't work (not sure if that means I have
> something else wrong?):
>
> svn list svn+ssh://www.thedoman.com/svn/reponame
> svn: No repository found in 'svn+ssh://
No, you can use the SSH to set up a tunnel from a local port on your machine
to port 80 on the remote machine. It's built gracefully into clients like
Putty: read the manual page on ssh to do it from a Linux command line.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
RE: More debug info options than "neon-debug-mask = 130"?
Posted by Jeff Jensen <je...@upstairstechnology.com>.
> -----Original Message-----
> From: rooneg@gmail.com [mailto:rooneg@gmail.com] On Behalf Of
> Garrett Rooney
> Sent: Sunday, May 21, 2006 10:43 PM
> To: Jeff Jensen
> Cc: users@subversion.tigris.org
> Subject: Re: More debug info options than "neon-debug-mask = 130"?
>
> On 5/21/06, Jeff Jensen <je...@upstairstechnology.com> wrote:
> >
> > > -----Original Message-----
> > > From: rooneg@gmail.com [mailto:rooneg@gmail.com] On Behalf Of
> > > Garrett Rooney
> > > Sent: Saturday, May 20, 2006 7:22 PM
> > > To: Jeff Jensen
> > > Cc: users@subversion.tigris.org
> > > Subject: Re: More debug info options than "neon-debug-mask = 130"?
> > >
> > > On 5/19/06, Jeff Jensen <je...@upstairstechnology.com> wrote:
> > > > Hi,
> > > >
> > > > Still trying to track down a problem, and need more debug
> > > info that subject.
> > > > Are there any additional options to get more debug info?
> > > I've tried
> > > > adjusting the "130" numbers, but don't seem to get more out.
> > > >
> > > > I used TCPMon to inspect the response for any additional
> > > > peculiarities, but it is the same is the debug output below.
> > > >
> > > > Particularly, looking for further details on the
> processing that
> > > > determines the "OPTIONS request failed" as shown below.
> > >
> > > When debugging DAV issues I often find ethereal to be
> useful, it'll
> > > show you the entire http session, all data included.
> >
> > Thanks for the help Garret.
> >
> > I've been looking at the trace, but don't see any problems
> yet (with
> > my untrained eye though!).
> >
> > I discovered something interesting though: I am correctly
> prompted for
> > authentication with commands such as checkout and update,
> but not with
> > commit (the one that uses OPTIONS). And I mean when I
> "start fresh"
> > and issue one of them as the first command, not subsequent commands.
> >
> > So it seems that something is blocking the OPTIONS request.
> > Struggling to find what. According to the net guy, he says
> HTTP has
> > "free reign" going through the firewall (MS ISA) - nothing
> blocked for HTTP.
>
> I suspect he's, uhh, wrong. I've heard multiple people on
> this list complain about MS ISA proxy servers. If you can
> try tunneling through the proxy somehow (an ssh tunnel, for
> example) and see if that helps, it would be worthwhile. Or
> try connecting to a server that doesn't require going through
> the proxy and see if that works.
Yes, I can ssh to the Linux server svn is on, and that goes through ISA.
It's how I maintain the server.
I infer you mean to try a svn commit over ssh. Just tried that, and even
the list command doesn't work (not sure if that means I have something else
wrong?):
svn list svn+ssh://www.thedoman.com/svn/reponame
svn: No repository found in 'svn+ssh://
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: More debug info options than "neon-debug-mask = 130"?
Posted by Garrett Rooney <ro...@electricjellyfish.net>.
On 5/21/06, Jeff Jensen <je...@upstairstechnology.com> wrote:
>
> > -----Original Message-----
> > From: rooneg@gmail.com [mailto:rooneg@gmail.com] On Behalf Of
> > Garrett Rooney
> > Sent: Saturday, May 20, 2006 7:22 PM
> > To: Jeff Jensen
> > Cc: users@subversion.tigris.org
> > Subject: Re: More debug info options than "neon-debug-mask = 130"?
> >
> > On 5/19/06, Jeff Jensen <je...@upstairstechnology.com> wrote:
> > > Hi,
> > >
> > > Still trying to track down a problem, and need more debug
> > info that subject.
> > > Are there any additional options to get more debug info?
> > I've tried
> > > adjusting the "130" numbers, but don't seem to get more out.
> > >
> > > I used TCPMon to inspect the response for any additional
> > > peculiarities, but it is the same is the debug output below.
> > >
> > > Particularly, looking for further details on the processing that
> > > determines the "OPTIONS request failed" as shown below.
> >
> > When debugging DAV issues I often find ethereal to be useful,
> > it'll show you the entire http session, all data included.
>
> Thanks for the help Garret.
>
> I've been looking at the trace, but don't see any problems yet (with my
> untrained eye though!).
>
> I discovered something interesting though: I am correctly prompted for
> authentication with commands such as checkout and update, but not with
> commit (the one that uses OPTIONS). And I mean when I "start fresh" and
> issue one of them as the first command, not subsequent commands.
>
> So it seems that something is blocking the OPTIONS request. Struggling to
> find what. According to the net guy, he says HTTP has "free reign" going
> through the firewall (MS ISA) - nothing blocked for HTTP.
I suspect he's, uhh, wrong. I've heard multiple people on this list
complain about MS ISA proxy servers. If you can try tunneling through
the proxy somehow (an ssh tunnel, for example) and see if that helps,
it would be worthwhile. Or try connecting to a server that doesn't
require going through the proxy and see if that works.
-garrett
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
RE: More debug info options than "neon-debug-mask = 130"?
Posted by Igmar Palsenberg <ma...@jdimedia.nl>.
> So it seems that something is blocking the OPTIONS request. Struggling to
> find what. According to the net guy, he says HTTP has "free reign" going
> through the firewall (MS ISA) - nothing blocked for HTTP.
He's probably wrong. I've seen issues if ISA server screwing up HTTP
traffic while it was configured not to do so. Use either https:// or try a
ssh tunnel.
Igmar
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
RE: More debug info options than "neon-debug-mask = 130"?
Posted by Jeff Jensen <je...@upstairstechnology.com>.
> -----Original Message-----
> From: rooneg@gmail.com [mailto:rooneg@gmail.com] On Behalf Of
> Garrett Rooney
> Sent: Saturday, May 20, 2006 7:22 PM
> To: Jeff Jensen
> Cc: users@subversion.tigris.org
> Subject: Re: More debug info options than "neon-debug-mask = 130"?
>
> On 5/19/06, Jeff Jensen <je...@upstairstechnology.com> wrote:
> > Hi,
> >
> > Still trying to track down a problem, and need more debug
> info that subject.
> > Are there any additional options to get more debug info?
> I've tried
> > adjusting the "130" numbers, but don't seem to get more out.
> >
> > I used TCPMon to inspect the response for any additional
> > peculiarities, but it is the same is the debug output below.
> >
> > Particularly, looking for further details on the processing that
> > determines the "OPTIONS request failed" as shown below.
>
> When debugging DAV issues I often find ethereal to be useful,
> it'll show you the entire http session, all data included.
Thanks for the help Garret.
I've been looking at the trace, but don't see any problems yet (with my
untrained eye though!).
I discovered something interesting though: I am correctly prompted for
authentication with commands such as checkout and update, but not with
commit (the one that uses OPTIONS). And I mean when I "start fresh" and
issue one of them as the first command, not subsequent commands.
So it seems that something is blocking the OPTIONS request. Struggling to
find what. According to the net guy, he says HTTP has "free reign" going
through the firewall (MS ISA) - nothing blocked for HTTP.
I can't see anything on the Linux server hosting Subversion that would block
it. Using http://localhost/ on the same server with Subversion, it works.
Even on that server if I use the domain URL, it fails (goes out and comes
back in).
Gladly accepting any more tips! :-)
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: More debug info options than "neon-debug-mask = 130"?
Posted by Garrett Rooney <ro...@electricjellyfish.net>.
On 5/19/06, Jeff Jensen <je...@upstairstechnology.com> wrote:
> Hi,
>
> Still trying to track down a problem, and need more debug info that subject.
> Are there any additional options to get more debug info? I've tried
> adjusting the "130" numbers, but don't seem to get more out.
>
> I used TCPMon to inspect the response for any additional peculiarities, but
> it is the same is the debug output below.
>
> Particularly, looking for further details on the processing that determines
> the "OPTIONS request failed" as shown below.
When debugging DAV issues I often find ethereal to be useful, it'll
show you the entire http session, all data included.
-garrett
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org