You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Subversion <Su...@sensor-technik.de> on 2006/04/04 06:41:26 UTC
LDAP authentication is very slow
Hello all
I'm hitting a strange problem, when I try to authenticate a user with
apache against a LDAP server...
But I think it's the best to start with my configuration:
I use subversion 1.3.0 for Win32 and Apache 2.0.55 with the LDAP module
from http://muquit.com/ (mm_auth_ldap_module).
my configuration looks like:
<Location /svn/repo/>
DAV svn
SVNParentPath path/to/repo
SVNListParentPath On
AuthUserFile "path/to/access.conf"
SVNIndexXSLT "/svnindex.xsl"
AuthName "Subversion Repository"
AuthType Basic
LDAP_Server server
LDAP_Port 389
Bind_Tries 5
LDAP_Protocol_Version 3
Base_DN "cn=Users,dc=domain,dc=local"
Bind_DN "cn=xxxxxx,cn=Users,dc=domain,dc=local"
Bind_Pass "xxxxxx"
UID_Attr sAMAccountName
LDAP_Debug On
require valid-user
</Location>
Now to the problem:
When I try to connect to the repository with firefox everything works
fine, but every time I try to connect with "svn ls http://server/repo"
it takes up to 30 Seconds till the command returns with a result.
I traced the network traffic with ethereal and every time the user was
authenticated and authorized by the LDAP server, the svn client sends a
new authentication request. Then in this loop it hangs for about 30
seconds (produces some network traffic) and came back with a "user
authorized" at last.
If the user is not authorized to access the repository an error returns
immediately.
I don't know if it's really a subversion issue, but because a user can
authenticate with the web browser immediately I suppose so. Maybe
someone had the same problems and found a solution for it.
Regards
Christoph
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: LDAP authentication is very slow
Posted by Greg Thomas <th...@omc.bt.co.uk>.
On Tue, 04 Apr 2006 08:41:26 +0200, "Subversion"
<Su...@sensor-technik.de> wrote:
>I use subversion 1.3.0 for Win32 and Apache 2.0.55 with the LDAP module
>from http://muquit.com/ (mm_auth_ldap_module).
You may get a better response with the Apache supplied LDAP module -
http://httpd.apache.org/docs/2.0/mod/mod_auth_ldap.html (2.0)
http://httpd.apache.org/docs/2.2/mod/mod_authnz_ldap.html (2.2)
which, as it is shipped with Apache, probably has better support in
general (I've got 2.0 working fine with it, FWIW). That said, Apache
authentication performance is really an issue for the Apache users
list, not the Subversion users list.
Greg
--
This post represents the views of the author and does
not necessarily accurately represent the views of BT.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org