You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Tristen Fielding <tr...@hotmail.com> on 2008/07/31 20:11:39 UTC

svnserve and SASL encryption...

All,
 
End Goal: There are three of us located in different parts of the world that need to work on the same source code, therefore we decided to use Subversion 1.5 over the internet with SASL encryption.
 
Therefore, I've installed the latest stable version of Subverion (1.5.xx) and TortoiseSVN for Windows on a WinXp Pro SP2 machine and started svnserve as a windows service without SASL encryption - things worked just fine.
 
Next, I added SASL (using snv-book.pdf as a guide, page 163-165) with the following settings:
 
-- svnserv.conf --
use-sasl=true
pwcheck_method: auxprop
auxprop_plugin: sasldb
sasldb_path: c:\trees\main\sasldb
mech_list: DIGEST-MD5
min-encryption = 0
max-encryption = 256
 
I created the sasl file, verified that the registry is configured correctly and when I tested this configuration using TortoiseSVN things still worked (I get a username/password prompt and I can see the depot).
 
Next, I changed min-encryption = 1, things still worked.
 
But when I changed min-encryption to 2 or 128, I get an unknown error (-1) when trying to browse the depot using TortoiseSVN.
 
I'm not sure what I'm doing wrong, any ideas?
 
Thanks,
 
-Tristen.
 
_________________________________________________________________
Time for vacation? WIN what you need- enter now!
http://www.gowindowslive.com/summergiveaway/?ocid=tag_jlyhm

RE: svnserve and SASL encryption...

Posted by Tristen Fielding <tr...@hotmail.com>.
Mark,
 
Thanks for the info, can you let us know when SASL support has been added (compiled) to CollabNet Windows binaries and to TortoiseSVN?
 
Thanks,
Tristen



> Date: Thu, 31 Jul 2008 18:30:21 -0400> From: markphip@gmail.com> To: tristenfielding@hotmail.com> Subject: Re: svnserve and SASL encryption...> CC: users@subversion.tigris.org> > On Thu, Jul 31, 2008 at 4:11 PM, Tristen Fielding> <tr...@hotmail.com> wrote:> > > End Goal: There are three of us located in different parts of the world that> > need to work on the same source code, therefore we decided to use Subversion> > 1.5 over the internet with SASL encryption.> >> > Therefore, I've installed the latest stable version of Subverion (1.5.xx)> > and TortoiseSVN for Windows on a WinXp Pro SP2 machine and started svnserve> > as a windows service without SASL encryption - things worked just fine.> >> > Next, I added SASL (using snv-book.pdf as a guide, page 163-165) with the> > following settings:> >> > -- svnserv.conf --> > use-sasl=true> > pwcheck_method: auxprop> > auxprop_plugin: sasldb> > sasldb_path: c:\trees\main\sasldb> > mech_list: DIGEST-MD5> > min-encryption = 0> > max-encryption = 256> >> > I created the sasl file, verified that the registry is configured correctly> > and when I tested this configuration using TortoiseSVN things still worked> > (I get a username/password prompt and I can see the depot).> >> > Next, I changed min-encryption = 1, things still worked.> >> > But when I changed min-encryption to 2 or 128, I get an unknown error (-1)> > when trying to browse the depot using TortoiseSVN.> >> > I'm not sure what I'm doing wrong, any ideas?> > One of the items in the TortoiseSVN 1.5.1 changelog was to compile> SASL DigestMD5 with support for encryption. So you would need> TortoiseSVN 1.5.1 and your server binaries will also need this> support. I can say that the CollabNet Windows binaries do NOT have> this support compiled in either. We are looking into it.> > -- > Thanks> > Mark Phippard> http://markphip.blogspot.com/
_________________________________________________________________
Use video conversation to talk face-to-face with Windows Live Messenger.
http://www.windowslive.com/messenger/connect_your_way.html?ocid=TXT_TAGLM_WL_Refresh_messenger_video_072008

Re: svnserve and SASL encryption...

Posted by Mark Phippard <ma...@gmail.com>.
On Thu, Jul 31, 2008 at 4:11 PM, Tristen Fielding
<tr...@hotmail.com> wrote:

> End Goal: There are three of us located in different parts of the world that
> need to work on the same source code, therefore we decided to use Subversion
> 1.5 over the internet with SASL encryption.
>
> Therefore, I've installed the latest stable version of Subverion (1.5.xx)
> and TortoiseSVN for Windows on a WinXp Pro SP2 machine and started svnserve
> as a windows service without SASL encryption - things worked just fine.
>
> Next, I added SASL (using snv-book.pdf as a guide, page 163-165) with the
> following settings:
>
> -- svnserv.conf --
> use-sasl=true
> pwcheck_method: auxprop
> auxprop_plugin: sasldb
> sasldb_path: c:\trees\main\sasldb
> mech_list: DIGEST-MD5
> min-encryption = 0
> max-encryption = 256
>
> I created the sasl file, verified that the registry is configured correctly
> and when I tested this configuration using TortoiseSVN things still worked
> (I get a username/password prompt and I can see the depot).
>
> Next, I changed min-encryption = 1, things still worked.
>
> But when I changed min-encryption to 2 or 128, I get an unknown error (-1)
> when trying to browse the depot using TortoiseSVN.
>
> I'm not sure what I'm doing wrong, any ideas?

One of the items in the TortoiseSVN 1.5.1 changelog was to compile
SASL DigestMD5 with support for encryption.  So you would need
TortoiseSVN 1.5.1 and your server binaries will also need this
support.  I can say that the CollabNet Windows binaries do NOT have
this support compiled in either.  We are looking into it.

-- 
Thanks

Mark Phippard
http://markphip.blogspot.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org