You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by "Kok Jer Min (Gmail)" <je...@gmail.com> on 2006/02/01 05:42:00 UTC

Svn 1.3 command line with authentication problem

Can anyone confirm this is a bug or is there a fix for it?
I have svn repository setup and running with Apache HTTP and Windows
Domain Authentication. It work fine all this while with command line
or TortoiseSVN.
After I updated to svn to 1.3.0, I could no longer use command line to
access (list or commit) those folder in the repository which require
authentication,
For eg. This is my access file:
[/]
*=r

[/folder1]
*=r
DOMAIN\USER1=rw

I could do: svn list http://mycomp/svn
But could not do: svn list http://mycomp/svn/folder1

In the previous version of svn, when I list http://mycomp/svn/folder1,
it will prompt me for username and password or I could use --username
and --password. But it won't work in 1.3.0. The error message I
received is:
svn: PROPFIND request failed on '/svn/folder1'
svn: PROPFIND of '/test-repos': 403 Forbidden (http://mycomp)


However, I could still access to this folder via TortoiseSVN repo
browser as it will prompt me for u/p

Anyone have any idea or it is a bug in 1.3.0??

This is the version info on my apache:
Apache/2.0.55 (win32) DAV/2 SVN/1.3.0 mod_auth_sspi/1.0.3

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org


Re: Svn 1.3 command line with authentication problem

Posted by Norbert Unterberg <nu...@gmail.com>.
2006/2/2, Kok Jer Min (Gmail) <je...@gmail.com>:

> <Location /svn>
[...]
>         AuthType SSPI
>         SSPIAuth On
>         SSPIAuthoritative On
>         SSPIDomain <domaincontroller>
>         SSPIOfferBasic On

Add this:

	SSPIOmitDomain On
	SSPIUsernameCase lower

And then use the username in lower case without the domain part in the
SVN access file:

[/folder1]
*=
user1=rw


Problem is that windows is very inconsistent with the upper/lower case
of user names, but SVN is case sensitive.

Norbert

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org


RE: Svn 1.3 command line with authentication problem

Posted by Lieven Govaerts <lg...@mobsol.be>.
I've tested this setup, but with basic authentication instead of SPPI and
that works fine with svn 1.3.

I don't have access to a domain server at home unfortunately, so I can't 
debug and check what's going on with SPPI.

Maybe you can try what's documented here?
http://geekswithblogs.net/flanakin/archive/2005/08/31/51743.aspx 

Should give you this access file:

[groups]
dev = DOMAIN\USER1, user1

[/]

[/folder1]
*=
dev=rw


Lieven.

> -----Original Message-----
> From: Kok Jer Min (Gmail) [mailto:jermin.kok@gmail.com] 
> Sent: donderdag 2 februari 2006 2:29
> To: Lieven Govaerts; users@subversion.tigris.org
> Subject: Re: Svn 1.3 command line with authentication problem
> 
> Hi Lieven,
> Thanks for offering help, I give you more detail now:
> 
> Yes, I am using svn 1.3.0 client.
> Here is the location part of my httpd.conf <Location /svn>
> 	DAV svn
> 	SVNPath C:\svn
> 	
> 	AuthName "Subversion Repository"
> 	AuthzSVNAccessFile C:\svn\conf\AccessPolicy
> 	Satisfy Any
> 	Require valid-user
> 
> 	AuthType SSPI
> 	SSPIAuth On
> 	SSPIAuthoritative On
> 	SSPIDomain <domaincontroller>
> 	SSPIOfferBasic On
> 
> </Location>
> 
> And I just notice I supplied a wrong info in my previous 
> mail, the access file should be like this:
> [/]
> *=r
> 
> [/folder1]
> *=
> DOMAIN\USER1=rw
> 
> Ie. everyone can read in root (/), but in /folder1, no one 
> can read except DOMAIN\USER1 who has rw access
> 
> With this setting,
> You may successfully in doing: svn list http://mycomp/svn But 
> fail to: svn list http://mycomp/svn/folder1
> 
> If you rollback to the previous version of svn, and do svn list
> http://mycomp/svn/folder1 again, it will prompt you for 
> username and password, and you could successfully list the 
> folder after entered the detail.
> 
> Let me (and other) know if you have the same problem, thanks. :)
> 
> Cheers
> 
> 
> On 2/2/06, Lieven Govaerts <lg...@mobsol.be> wrote:
> > Hi,
> >
> > based on what you describe here I cannot reproduce your problem.
> >
> > Can you show the contents of your httpd.conf ( the /svn Location )?
> >
> > What is the svn client version you're using? 1.3 as well?
> >
> > Lieven.
> >
> > > -----Original Message-----
> > > From: Kok Jer Min (Gmail) [mailto:jermin.kok@gmail.com]
> > > Sent: woensdag 1 februari 2006 6:42
> > > To: users@subversion.tigris.org
> > > Subject: Svn 1.3 command line with authentication problem
> > >
> > > Can anyone confirm this is a bug or is there a fix for it?
> > > I have svn repository setup and running with Apache HTTP 
> and Windows 
> > > Domain Authentication. It work fine all this while with 
> command line 
> > > or TortoiseSVN.
> > > After I updated to svn to 1.3.0, I could no longer use 
> command line 
> > > to access (list or commit) those folder in the repository which 
> > > require authentication, For eg. This is my access file:
> > > [/]
> > > *=r
> > >
> > > [/folder1]
> > > *=r
> > > DOMAIN\USER1=rw
> > >
> > > I could do: svn list http://mycomp/svn But could not do: svn list 
> > > http://mycomp/svn/folder1
> > >
> > > In the previous version of svn, when I list 
> > > http://mycomp/svn/folder1, it will prompt me for username and 
> > > password or I could use --username and --password. But it 
> won't work 
> > > in 1.3.0. The error message I received is:
> > > svn: PROPFIND request failed on '/svn/folder1'
> > > svn: PROPFIND of '/test-repos': 403 Forbidden (http://mycomp)
> > >
> > >
> > > However, I could still access to this folder via TortoiseSVN repo 
> > > browser as it will prompt me for u/p
> > >
> > > Anyone have any idea or it is a bug in 1.3.0??
> > >
> > > This is the version info on my apache:
> > > Apache/2.0.55 (win32) DAV/2 SVN/1.3.0 mod_auth_sspi/1.0.3
> > >
> >
> > --
> > No virus found in this outgoing message.
> > Checked by AVG Free Edition.
> > Version: 7.1.375 / Virus Database: 267.14.25/247 - Release Date: 
> > 31/01/2006
> >
> >
> >
> 
> --
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.1.375 / Virus Database: 267.14.25/247 - Release 
> Date: 31/01/2006
>  
> 

-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.375 / Virus Database: 267.15.0/248 - Release Date: 1/02/2006
 


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: Svn 1.3 command line with authentication problem

Posted by "Kok Jer Min (Gmail)" <je...@gmail.com>.
Hi Lieven,
Thanks for offering help, I give you more detail now:

Yes, I am using svn 1.3.0 client.
Here is the location part of my httpd.conf
<Location /svn>
	DAV svn
	SVNPath C:\svn
	
	AuthName "Subversion Repository"
	AuthzSVNAccessFile C:\svn\conf\AccessPolicy
	Satisfy Any
	Require valid-user

	AuthType SSPI
	SSPIAuth On
	SSPIAuthoritative On
	SSPIDomain <domaincontroller>
	SSPIOfferBasic On

</Location>

And I just notice I supplied a wrong info in my previous mail, the
access file should be like this:
[/]
*=r

[/folder1]
*=
DOMAIN\USER1=rw

Ie. everyone can read in root (/), but in /folder1, no one can read
except DOMAIN\USER1 who has rw access

With this setting,
You may successfully in doing: svn list http://mycomp/svn
But fail to: svn list http://mycomp/svn/folder1

If you rollback to the previous version of svn, and do svn list
http://mycomp/svn/folder1 again, it will prompt you for username and
password, and you could successfully list the folder after entered the
detail.

Let me (and other) know if you have the same problem, thanks. :)

Cheers


On 2/2/06, Lieven Govaerts <lg...@mobsol.be> wrote:
> Hi,
>
> based on what you describe here I cannot reproduce your problem.
>
> Can you show the contents of your httpd.conf ( the /svn Location )?
>
> What is the svn client version you're using? 1.3 as well?
>
> Lieven.
>
> > -----Original Message-----
> > From: Kok Jer Min (Gmail) [mailto:jermin.kok@gmail.com]
> > Sent: woensdag 1 februari 2006 6:42
> > To: users@subversion.tigris.org
> > Subject: Svn 1.3 command line with authentication problem
> >
> > Can anyone confirm this is a bug or is there a fix for it?
> > I have svn repository setup and running with Apache HTTP and
> > Windows Domain Authentication. It work fine all this while
> > with command line or TortoiseSVN.
> > After I updated to svn to 1.3.0, I could no longer use
> > command line to access (list or commit) those folder in the
> > repository which require authentication, For eg. This is my
> > access file:
> > [/]
> > *=r
> >
> > [/folder1]
> > *=r
> > DOMAIN\USER1=rw
> >
> > I could do: svn list http://mycomp/svn
> > But could not do: svn list http://mycomp/svn/folder1
> >
> > In the previous version of svn, when I list
> > http://mycomp/svn/folder1, it will prompt me for username and
> > password or I could use --username and --password. But it
> > won't work in 1.3.0. The error message I received is:
> > svn: PROPFIND request failed on '/svn/folder1'
> > svn: PROPFIND of '/test-repos': 403 Forbidden (http://mycomp)
> >
> >
> > However, I could still access to this folder via TortoiseSVN
> > repo browser as it will prompt me for u/p
> >
> > Anyone have any idea or it is a bug in 1.3.0??
> >
> > This is the version info on my apache:
> > Apache/2.0.55 (win32) DAV/2 SVN/1.3.0 mod_auth_sspi/1.0.3
> >
>
> --
> No virus found in this outgoing message.
> Checked by AVG Free Edition.
> Version: 7.1.375 / Virus Database: 267.14.25/247 - Release Date: 31/01/2006
>
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org


RE: Svn 1.3 command line with authentication problem

Posted by Lieven Govaerts <lg...@mobsol.be>.
Hi, 

based on what you describe here I cannot reproduce your problem.

Can you show the contents of your httpd.conf ( the /svn Location )?

What is the svn client version you're using? 1.3 as well?

Lieven.

> -----Original Message-----
> From: Kok Jer Min (Gmail) [mailto:jermin.kok@gmail.com] 
> Sent: woensdag 1 februari 2006 6:42
> To: users@subversion.tigris.org
> Subject: Svn 1.3 command line with authentication problem
> 
> Can anyone confirm this is a bug or is there a fix for it?
> I have svn repository setup and running with Apache HTTP and 
> Windows Domain Authentication. It work fine all this while 
> with command line or TortoiseSVN.
> After I updated to svn to 1.3.0, I could no longer use 
> command line to access (list or commit) those folder in the 
> repository which require authentication, For eg. This is my 
> access file:
> [/]
> *=r
> 
> [/folder1]
> *=r
> DOMAIN\USER1=rw
> 
> I could do: svn list http://mycomp/svn
> But could not do: svn list http://mycomp/svn/folder1
> 
> In the previous version of svn, when I list 
> http://mycomp/svn/folder1, it will prompt me for username and 
> password or I could use --username and --password. But it 
> won't work in 1.3.0. The error message I received is:
> svn: PROPFIND request failed on '/svn/folder1'
> svn: PROPFIND of '/test-repos': 403 Forbidden (http://mycomp)
> 
> 
> However, I could still access to this folder via TortoiseSVN 
> repo browser as it will prompt me for u/p
> 
> Anyone have any idea or it is a bug in 1.3.0??
> 
> This is the version info on my apache:
> Apache/2.0.55 (win32) DAV/2 SVN/1.3.0 mod_auth_sspi/1.0.3
>  

-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.375 / Virus Database: 267.14.25/247 - Release Date: 31/01/2006
 


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org