You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@subversion.apache.org by Sander Rijken <sr...@d-90.nl> on 2008/10/20 11:50:57 UTC
mod_auth_sspi SSIPerRequestAuth / Roundtable notes incorrect?
I doubt this information at [1] is correct:
"SSPI re-authenticates automatically. The mod_auth_sspi module has an
option "SSPIPerRequestAuth on" that, if turned on reduces the
re-authentication to once per session. If turned off (the default), it
re-authenticates a lot more"
The mod_auth_sspi code states this about the setting:
"set to 'on' if you want authorization per request instead of per connection"
It seems to me that per request auth causes more requests than per
connection auth, instead of less?
[1]: http://svn-summit.open.collab.net/wiki/RoundTableFeedback
--
Sander Rijken
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Re: mod_auth_sspi SSIPerRequestAuth / Roundtable notes incorrect?
Posted by Sander Rijken <sr...@d-90.nl>.
On Mon, Oct 20, 2008 at 2:59 PM, Mark Phippard <ma...@gmail.com> wrote:
> On Mon, Oct 20, 2008 at 7:50 AM, Sander Rijken <sr...@d-90.nl> wrote:
>> I doubt this information at [1] is correct:
>> "SSPI re-authenticates automatically. The mod_auth_sspi module has an
>> option "SSPIPerRequestAuth on" that, if turned on reduces the
>> re-authentication to once per session. If turned off (the default), it
>> re-authenticates a lot more"
>>
>> The mod_auth_sspi code states this about the setting:
>> "set to 'on' if you want authorization per request instead of per connection"
>>
>> It seems to me that per request auth causes more requests than per
>> connection auth, instead of less?
>
> It looks like Stefan King added that. Are you saying he just got the
> on/off setting reversed?
>
I think so.. and also what's default. To avoid confusion, I think the
default is 'off', and that 'off' is the setting that uses less auth
requests.
--
Sander
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Re: mod_auth_sspi SSIPerRequestAuth / Roundtable notes incorrect?
Posted by steveking <to...@gmail.com>.
Mark Phippard wrote:
> On Mon, Oct 20, 2008 at 7:50 AM, Sander Rijken <sr...@d-90.nl> wrote:
>> I doubt this information at [1] is correct:
>> "SSPI re-authenticates automatically. The mod_auth_sspi module has an
>> option "SSPIPerRequestAuth on" that, if turned on reduces the
>> re-authentication to once per session. If turned off (the default), it
>> re-authenticates a lot more"
>>
>> The mod_auth_sspi code states this about the setting:
>> "set to 'on' if you want authorization per request instead of per connection"
>>
>> It seems to me that per request auth causes more requests than per
>> connection auth, instead of less?
>
> It looks like Stefan King added that. Are you saying he just got the
> on/off setting reversed?
>
Yes, that was me.
And yes, I think the on/off is reversed.
The last time I tested this, mod_auth_sspi was at version 1.0.1. When I
debugged a problem with 'excessive traffic' with SSPI, we had some
discussions about this on the tsvn and mod_auth_sspi mailing lists,
which then lead to patches to make the 'per connection' the default.
Could be that when we discussed the introduction of the config flag that
we then discussed about the reverse from what it finally got implemented.
Stefan
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Re: mod_auth_sspi SSIPerRequestAuth / Roundtable notes incorrect?
Posted by Mark Phippard <ma...@gmail.com>.
On Mon, Oct 20, 2008 at 7:50 AM, Sander Rijken <sr...@d-90.nl> wrote:
> I doubt this information at [1] is correct:
> "SSPI re-authenticates automatically. The mod_auth_sspi module has an
> option "SSPIPerRequestAuth on" that, if turned on reduces the
> re-authentication to once per session. If turned off (the default), it
> re-authenticates a lot more"
>
> The mod_auth_sspi code states this about the setting:
> "set to 'on' if you want authorization per request instead of per connection"
>
> It seems to me that per request auth causes more requests than per
> connection auth, instead of less?
It looks like Stefan King added that. Are you saying he just got the
on/off setting reversed?
--
Thanks
Mark Phippard
http://markphip.blogspot.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org