You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Subversion <Su...@sensor-technik.de> on 2006/04/04 06:41:26 UTC

LDAP authentication is very slow

Hello all

I'm hitting a strange problem, when I try to authenticate a user with 
apache against a LDAP server...
But I think it's the best to start with my configuration:
I use subversion 1.3.0 for Win32 and Apache 2.0.55 with the LDAP module 
from http://muquit.com/ (mm_auth_ldap_module).

my configuration looks like:

<Location /svn/repo/>
     DAV                       svn
     SVNParentPath             path/to/repo
     SVNListParentPath         On
     AuthUserFile              "path/to/access.conf"
     SVNIndexXSLT              "/svnindex.xsl"
     AuthName                  "Subversion Repository"
     AuthType                  Basic
     LDAP_Server               server
     LDAP_Port                 389
     Bind_Tries                5
     LDAP_Protocol_Version     3
     Base_DN                   "cn=Users,dc=domain,dc=local"
     Bind_DN                   "cn=xxxxxx,cn=Users,dc=domain,dc=local"
     Bind_Pass                 "xxxxxx"
     UID_Attr                  sAMAccountName
     LDAP_Debug                On
     require valid-user
</Location>


Now to the problem:
When I try to connect to the repository with firefox everything works 
fine, but every time I try to connect with "svn ls http://server/repo" 
it takes up to 30 Seconds till the command returns with a result.

I traced the network traffic with ethereal and every time the user was 
authenticated and authorized by the LDAP server, the svn client sends a 
new authentication request. Then in this loop it hangs for about 30 
seconds (produces some network traffic) and came back with a "user 
authorized" at last.

If the user is not authorized to access the repository an error returns 
immediately.

I don't know if it's really a subversion issue, but because a user can 
authenticate with the web browser immediately I suppose so. Maybe 
someone had the same problems and found a solution for it.

Regards

Christoph




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: LDAP authentication is very slow

Posted by Greg Thomas <th...@omc.bt.co.uk>.
On Tue, 04 Apr 2006 08:41:26 +0200, "Subversion"
<Su...@sensor-technik.de> wrote:

>I use subversion 1.3.0 for Win32 and Apache 2.0.55 with the LDAP module 
>from http://muquit.com/ (mm_auth_ldap_module).

You may get a better response with the Apache supplied LDAP module - 

http://httpd.apache.org/docs/2.0/mod/mod_auth_ldap.html (2.0)
http://httpd.apache.org/docs/2.2/mod/mod_authnz_ldap.html (2.2)

which, as it is shipped with Apache, probably has better support in
general (I've got 2.0 working fine with it, FWIW). That said, Apache
authentication performance is really an issue for the Apache users
list, not the Subversion users list.

Greg
-- 
This post represents the views of the author and does
not necessarily accurately represent the views of BT.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org