You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by su...@sensor-technik.de on 2006/04/04 11:17:54 UTC

Re-6: LDAP authentication is very slow

-------- Original Message --------
Subject: Re: Re-4: LDAP authentication is very slow (04-Apr-2006 12:45)
From:    thomasgd@omc.bt.co.uk
To:      subversion@sensor-technik.de

> That command will only send one request and hence only one
> authentication exchange. Check your HTTP logs for confirmation.
> 
> Greg


Here is the part of my log...

Request from Web Browser:
127.0.0.1 - user [04/Apr/2006:12:50:36 +0200] "GET /svn/path/prj/trunk/ HTTP/1.1" 200 948


!One! Command: "svn ls http://server/svn/path/prj" produced this:

127.0.0.1 - - [04/Apr/2006:12:51:13 +0200] "PROPFIND /svn/path/prj/trunk HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:12:51:13 +0200] "PROPFIND /svn/path/prj/trunk HTTP/1.1" 207 706
127.0.0.1 - user [04/Apr/2006:12:51:14 +0200] "PROPFIND /svn/path/!svn/vcc/default HTTP/1.1" 207 407
127.0.0.1 - user [04/Apr/2006:12:51:14 +0200] "PROPFIND /svn/path/!svn/bln/14 HTTP/1.1" 207 460
127.0.0.1 - user [04/Apr/2006:12:51:15 +0200] "PROPFIND /svn/path/prj/trunk HTTP/1.1" 207 706
127.0.0.1 - user [04/Apr/2006:12:51:16 +0200] "PROPFIND /svn/path/!svn/vcc/default HTTP/1.1" 207 407
127.0.0.1 - user [04/Apr/2006:12:51:16 +0200] "PROPFIND /svn/path/!svn/bln/14 HTTP/1.1" 207 460
127.0.0.1 - - [04/Apr/2006:12:51:17 +0200] "PROPFIND /svn/path/prj/trunk HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:12:51:17 +0200] "PROPFIND /svn/path/prj/trunk HTTP/1.1" 207 706
127.0.0.1 - user [04/Apr/2006:12:51:18 +0200] "PROPFIND /svn/path/!svn/vcc/default HTTP/1.1" 207 407
127.0.0.1 - user [04/Apr/2006:12:51:19 +0200] "PROPFIND /svn/path/!svn/bln/14 HTTP/1.1" 207 460
127.0.0.1 - user [04/Apr/2006:12:51:19 +0200] "PROPFIND /svn/path/prj/trunk HTTP/1.1" 207 706
127.0.0.1 - user [04/Apr/2006:12:51:20 +0200] "PROPFIND /svn/path/!svn/vcc/default HTTP/1.1" 207 460
127.0.0.1 - user [04/Apr/2006:12:51:21 +0200] "PROPFIND /svn/path/!svn/bc/14/prj/trunk HTTP/1.1" 207 717
127.0.0.1 - user [04/Apr/2006:12:51:22 +0200] "PROPFIND /svn/path/prj/trunk HTTP/1.1" 207 706
127.0.0.1 - user [04/Apr/2006:12:51:22 +0200] "PROPFIND /svn/path/!svn/vcc/default HTTP/1.1" 207 460
127.0.0.1 - user [04/Apr/2006:12:51:23 +0200] "PROPFIND /svn/path/!svn/bc/14/prj/trunk HTTP/1.1" 207 7130


I checked another repository, which uses SSPI authentication and it does this:
the command was: svn ls http://server/svn/foo

127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo HTTP/1.1" 401 511
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo HTTP/1.1" 207 645
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/vcc/default HTTP/1.1" 401 511
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/vcc/default HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/vcc/default HTTP/1.1" 207 396
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/bln/5 HTTP/1.1" 401 511
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/bln/5 HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/bln/5 HTTP/1.1" 207 447
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo HTTP/1.1" 401 511
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo HTTP/1.1" 207 645
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/vcc/default HTTP/1.1" 401 511
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/vcc/default HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/vcc/default HTTP/1.1" 207 396
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/bln/5 HTTP/1.1" 401 511
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/bln/5 HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/bln/5 HTTP/1.1" 207 447
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo HTTP/1.1" 401 511
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo HTTP/1.1" 207 645
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/vcc/default HTTP/1.1" 401 511
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/vcc/default HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/vcc/default HTTP/1.1" 207 396
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/bln/5 HTTP/1.1" 401 511
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/bln/5 HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/bln/5 HTTP/1.1" 207 447
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo HTTP/1.1" 401 511
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo HTTP/1.1" 207 645
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/vcc/default HTTP/1.1" 401 511
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/vcc/default HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/vcc/default HTTP/1.1" 207 447
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/bc/5 HTTP/1.1" 401 511
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/bc/5 HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/bc/5 HTTP/1.1" 207 655
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo HTTP/1.1" 401 511
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo HTTP/1.1" 207 645
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/vcc/default HTTP/1.1" 401 511
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/vcc/default HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/vcc/default HTTP/1.1" 207 447
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/bc/5 HTTP/1.1" 401 511
127.0.0.1 - - [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/bc/5 HTTP/1.1" 401 511
127.0.0.1 - user [04/Apr/2006:13:03:46 +0200] "PROPFIND /svn/foo/!svn/bc/5 HTTP/1.1" 207 3223

but there is no such a delay as with LDAP authentication. 
If you look at the timestamps, you see that all requests happened at the same time. But it seems that the SSPI authentication is faster than the one with LDAP, so it doesn't matter that there are so many requests.

Can anyone confirm this behavior?

Christoph 



To: thomasgd@omc.bt.co.uk
Cc: users@subversion.tigris.org






---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: Re-6: LDAP authentication is very slow

Posted by Greg Thomas <th...@omc.bt.co.uk>.
On Tue, 4 Apr 2006 11:17:54 +0000, <su...@sensor-technik.de>
wrote:

>Here is the part of my log...
>
>Request from Web Browser:
>127.0.0.1 - user [04/Apr/2006:12:50:36 +0200] "GET /svn/path/prj/trunk/ HTTP/1.1" 200 948
>
>
>!One! Command: "svn ls http://server/svn/path/prj" produced this:
>
>127.0.0.1 - - [04/Apr/2006:12:51:13 +0200] "PROPFIND /svn/path/prj/trunk HTTP/1.1" 401 511
>127.0.0.1 - user [04/Apr/2006:12:51:13 +0200] "PROPFIND /svn/path/prj/trunk HTTP/1.1" 207 706
[...]
Oops. I stand corrected. I /did/ double check my log before I posted,
but obviously didn't look close enough. Either way, in the short term
at least, you'll have to put up with it. 

Greg
PS Are you aware your email client is changing the Subject line each
time?
-- 
This post represents the views of the author and does
not necessarily accurately represent the views of BT.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org