You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Andy Levy <an...@gmail.com> on 2008/01/18 21:24:44 UTC

Re: SVN is trying to access the X509 Keychain?

On Jan 18, 2008 4:26 PM, RM1X <rm...@rogers.com> wrote:
> Hi everyone,
>
>   Complete SVN noob, crossing over from CVS which is otherwise built
> into my OS X 10.4.  I've successfully installed SVN, and am running the
> svnserve flavor of Subversion.
>
>   I've set up svn to run on svn:svn using a LaunchDaemon plist that
> acknowledges Bonjour, and that works as well.
>
>   My problem however, is that when I try to checkout using svn,
> authentication is denied after svn's failure to access the X509
> keychain.  Why is it trying to access this keychain?  How do I fix the
> problem?

As of SVN 1.4, on Macs Subversion caches your credentials in your
Keychain. See http://www.friday.com/misc/r17619.txt and
http://subversion.tigris.org/issues/show_bug.cgi?id=2339

That takes care of the "why is it accessing" question.

I'm away from my Mac right now so I can't check to see whether my
creds are in my keychain or ~/.subversion. I haven't used SVN on it
extensively yet but I should have at least one set of creds cached
there.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: SVN is trying to access the X509 Keychain?

Posted by RM1X <rm...@rogers.com>.
For anyone in the same boat, just regress to 1.3.  Works out of the box, 
no headaches!

RM1X wrote:
> Thanks for your continued help Andy.
>
>     "Assuming you have an X509Anchors keychain as well as a login 
> keychain,
> select the login keychain and then go to Preferences (Command-,). If
> "Set login keychain as default" isn't checked, check it, and try
> again."
>
>
> It's still a no-go unfortunately, surely I'm not the only SVN user 
> that has run into such difficulties?  Should I regress to a working 
> version (prior to the horrible keychain hack that is billed as a 
> powerful feature)?
>
> To recap, I issue:
> svn co --username abc --password 123 svn://localhost
>
> The abc/123 combo is something that following documentation, I 
> configured in the passwd file.  My svnserve daemon is running as user 
> "svn".  Having issued the command above, this causes a pop-up to 
> appear, "Unlock Keychain":
> *** svn wants to use keychain "X509Anchors" ***
>
> No password that I can enter in this pop-up works.  The root pass, 
> admin pass, svn's pass...all no good.  If I select the X509Anchors 
> keychain in the "Keychain Access" app, the Edit->Change Password for 
> Keychain selection is disabled.
>
> Thanks again!
>
>
> Andy Levy wrote:
>> On Jan 18, 2008 4:38 PM, RM1X <rm...@rogers.com> wrote:
>>  
>>> Hi Andy,
>>>
>>>     That was extremely fast, thanks for the response.  The issue is 
>>> that
>>> I don't have the password to the X509Anchors keychain, I don't believe
>>> that it is one that should ever be used either way correct?  I'm not an
>>> OS X poweruser myself, I just am stuck on an OS X environment for this
>>> particular project.
>>>     
>>
>> Open up Keychain Access and look under Passwords > Application. That's
>> where my SVN creds are. I don't have any references to X509 in my
>> Keychain.
>>
>> Assuming you have an X509Anchors keychain as well as a login keychain,
>> select the login keychain and then go to Preferences (Command-,). If
>> "Set login keychain as default" isn't checked, check it, and try
>> again.
>>
>> This is all for OS X 10.5, I've never used 10.4. If the above b0rks
>> your system, this conversation never happened.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: SVN is trying to access the X509 Keychain?

Posted by RM1X <rm...@rogers.com>.
Thanks for your continued help Andy.

	"Assuming you have an X509Anchors keychain as well as a login keychain,
select the login keychain and then go to Preferences (Command-,). If
"Set login keychain as default" isn't checked, check it, and try
again."


It's still a no-go unfortunately, surely I'm not the only SVN user that 
has run into such difficulties?  Should I regress to a working version 
(prior to the horrible keychain hack that is billed as a powerful feature)?

To recap, I issue:
svn co --username abc --password 123 svn://localhost

The abc/123 combo is something that following documentation, I 
configured in the passwd file.  My svnserve daemon is running as user 
"svn".  Having issued the command above, this causes a pop-up to appear, 
"Unlock Keychain":
*** svn wants to use keychain "X509Anchors" ***

No password that I can enter in this pop-up works.  The root pass, admin 
pass, svn's pass...all no good.  If I select the X509Anchors keychain in 
the "Keychain Access" app, the Edit->Change Password for Keychain 
selection is disabled.

Thanks again!


Andy Levy wrote:
> On Jan 18, 2008 4:38 PM, RM1X <rm...@rogers.com> wrote:
>   
>> Hi Andy,
>>
>>     That was extremely fast, thanks for the response.  The issue is that
>> I don't have the password to the X509Anchors keychain, I don't believe
>> that it is one that should ever be used either way correct?  I'm not an
>> OS X poweruser myself, I just am stuck on an OS X environment for this
>> particular project.
>>     
>
> Open up Keychain Access and look under Passwords > Application. That's
> where my SVN creds are. I don't have any references to X509 in my
> Keychain.
>
> Assuming you have an X509Anchors keychain as well as a login keychain,
> select the login keychain and then go to Preferences (Command-,). If
> "Set login keychain as default" isn't checked, check it, and try
> again.
>
> This is all for OS X 10.5, I've never used 10.4. If the above b0rks
> your system, this conversation never happened.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: SVN is trying to access the X509 Keychain?

Posted by Andy Levy <an...@gmail.com>.
On Jan 18, 2008 4:38 PM, RM1X <rm...@rogers.com> wrote:
> Hi Andy,
>
>     That was extremely fast, thanks for the response.  The issue is that
> I don't have the password to the X509Anchors keychain, I don't believe
> that it is one that should ever be used either way correct?  I'm not an
> OS X poweruser myself, I just am stuck on an OS X environment for this
> particular project.

Open up Keychain Access and look under Passwords > Application. That's
where my SVN creds are. I don't have any references to X509 in my
Keychain.

Assuming you have an X509Anchors keychain as well as a login keychain,
select the login keychain and then go to Preferences (Command-,). If
"Set login keychain as default" isn't checked, check it, and try
again.

This is all for OS X 10.5, I've never used 10.4. If the above b0rks
your system, this conversation never happened.

>     I'm to understand that this is a bug in this case?  How do I solve
> the issue precisely?  I just want the passwords to be read from the
> passwd file, that's all! ;)

I'm not sure yet that it's a bug. If the credentials are just in a
different keychain, then I'd suggest that SVN should have a way to
specify which keychain to use, or maybe a runtime option to skip
Keychain altogether.

> Andy Levy wrote:
> > On Jan 18, 2008 4:26 PM, RM1X <rm...@rogers.com> wrote:
> >
> >> Hi everyone,
> >>
> >>   Complete SVN noob, crossing over from CVS which is otherwise built
> >> into my OS X 10.4.  I've successfully installed SVN, and am running the
> >> svnserve flavor of Subversion.
> >>
> >>   I've set up svn to run on svn:svn using a LaunchDaemon plist that
> >> acknowledges Bonjour, and that works as well.
> >>
> >>   My problem however, is that when I try to checkout using svn,
> >> authentication is denied after svn's failure to access the X509
> >> keychain.  Why is it trying to access this keychain?  How do I fix the
> >> problem?
> >>
> >
> > As of SVN 1.4, on Macs Subversion caches your credentials in your
> > Keychain. See http://www.friday.com/misc/r17619.txt and
> > http://subversion.tigris.org/issues/show_bug.cgi?id=2339
> >
> > That takes care of the "why is it accessing" question.
> >
> > I'm away from my Mac right now so I can't check to see whether my
> > creds are in my keychain or ~/.subversion. I haven't used SVN on it
> > extensively yet but I should have at least one set of creds cached
> > there.
> >
>
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > For additional commands, e-mail: users-help@subversion.tigris.org
> >
> >
> >
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: SVN is trying to access the X509 Keychain?

Posted by RM1X <rm...@rogers.com>.
Hi Andy,

    That was extremely fast, thanks for the response.  The issue is that 
I don't have the password to the X509Anchors keychain, I don't believe 
that it is one that should ever be used either way correct?  I'm not an 
OS X poweruser myself, I just am stuck on an OS X environment for this 
particular project.

    I'm to understand that this is a bug in this case?  How do I solve 
the issue precisely?  I just want the passwords to be read from the 
passwd file, that's all! ;)

Thanks again.


Andy Levy wrote:
> On Jan 18, 2008 4:26 PM, RM1X <rm...@rogers.com> wrote:
>   
>> Hi everyone,
>>
>>   Complete SVN noob, crossing over from CVS which is otherwise built
>> into my OS X 10.4.  I've successfully installed SVN, and am running the
>> svnserve flavor of Subversion.
>>
>>   I've set up svn to run on svn:svn using a LaunchDaemon plist that
>> acknowledges Bonjour, and that works as well.
>>
>>   My problem however, is that when I try to checkout using svn,
>> authentication is denied after svn's failure to access the X509
>> keychain.  Why is it trying to access this keychain?  How do I fix the
>> problem?
>>     
>
> As of SVN 1.4, on Macs Subversion caches your credentials in your
> Keychain. See http://www.friday.com/misc/r17619.txt and
> http://subversion.tigris.org/issues/show_bug.cgi?id=2339
>
> That takes care of the "why is it accessing" question.
>
> I'm away from my Mac right now so I can't check to see whether my
> creds are in my keychain or ~/.subversion. I haven't used SVN on it
> extensively yet but I should have at least one set of creds cached
> there.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>
>   


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org