Case sensitivity issue when authenticating with a windows domain controller.

[Aaron Pedigo <Aa...@mailcode.com>]

Forgive me if this has already been mentioned.
I searched through the Database but only found file case sensitivity issues.
This is an issue with repository security.

I found a small issue with using SSPI and AuthzSVNAccessFile.

In my svnaccess file I have the following:
	[/]
	DOMAIN\UserName

If you enter a bogus login / password at the authentication dialog the
dialog comes back.
If you enter "domain\username" the dialog goes away but the svnaccess file
is case sensitive so it gives you and "Authorization Required" message.

There is actually an even worse case scenario.

Consider the following svnaccess file:
	[/]
	* = r
	[/secret]
	DOMAIN\UserName =

If you log in with "domain\username" the domain controller allows access.
Then since you are not "DOMAIN\UserName" you are not blocked from secret.


Aaron Pedigo
http://www.mailcode.com


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org