Asking around my network got a few potentially-useful resources, but at this point, I think the change actually needs to happen in the SVN library. Since the person who wrote SubvertPy also wrote PyKerberos, I wonder if it might work better than PySVN, and I'm not actually sure why I had it using PySVN instead of SubvertPy anyway, but I'm finding the SubvertPy documentation pretty opaque so far. Maybe someone in the subvertpy IRC channel can help...
On Wednesday, June 29, 2016 at 10:49:19 AM UTC-7, Cathy Mullican wrote: > > Sadly, I don't think anyone here has the necessary expertise -- my primary > language is Perl, not Python, and I'm pretty new to kerberos/AD/LDAP, too > -- but I'll ask around my network and see if anyone I know might be up for > it. > > On Tuesday, June 28, 2016 at 4:00:00 PM UTC-7, Christian Hammond wrote: >> >> Hi Cathy, >> >> Would you or someone on your end who has a familiarity with Python and >> Kerberos be willing to work with us on adding support? Review Board is open >> source, and I'd be willing to take a patch and assist with any work toward >> it. >> >> Christian >> >> >> On Tuesday, June 28, 2016, Cathy Mullican <cmul...@gmail.com> wrote: >> >>> It looks like RB isn't using (doesn't support?) kerberos authentication, >>> and that seems to be necessary for the set up we have. >>> >>> Sadly, this may mean we can't use RB at this time. :( >>> >>> On Monday, June 27, 2016 at 5:22:17 PM UTC-7, Cathy Mullican wrote: >>>> >>>> Since it is working on the command line at this point, my money would >>>> be on #2 rather than #1. >>>> >>>> >>>> http://serverfault.com/questions/183231/how-to-configure-review-board-running-under-linux-to-use-a-ldap-user >>>> >>>> is the most relevant-seeming info I've found so far, but enough has >>>> changed in the 5+ years since it was posted that applying the info there >>>> is >>>> not entirely straightforward. (Recreating a .subversion/auth tree is >>>> relatively straightforward; figuring out the LDAP auth configuration, less >>>> so.) >>>> >>>> On Monday, June 27, 2016 at 4:44:57 PM UTC-7, Christian Hammond wrote: >>>>> >>>>> Okay. So it's probably one of two things: >>>>> >>>>> 1) Something is still messed up somewhere with the recompilation. I >>>>> don't know what, and can't really debug that from here. >>>>> >>>>> 2) The standard way of authenticating that we do doesn't support your >>>>> setup. >>>>> >>>>> It could easily be #2. We must be able to authenticate to the >>>>> Subversion server using a username and password (or anonymously). If this >>>>> is going through some alternative method for authentication, then it may >>>>> require additional support in Review Board. >>>>> >>>>> Christian >>>>> >>>>> -- >>>>> Christian Hammond >>>>> President/CEO of Beanbag <https://www.beanbaginc.com/> >>>>> Makers of Review Board <https://www.reviewboard.org/> >>>>> >>>>> On Mon, Jun 27, 2016 at 4:34 PM, Cathy Mullican <cmul...@gmail.com> >>>>> wrote: >>>>> >>>>>> The server is VisualSVN (paid edition), with Windows AD >>>>>> authentication. The server where RB is running is joined to the domain, >>>>>> and I can authenticate from the command line. Most users connect via >>>>>> TortoiseSVN on their Windows systems; I also have one other Ubuntu box >>>>>> configured so that i can join the domain, authenticate with kinit, and >>>>>> run >>>>>> svn from the command line. >>>>>> >>>>>> On Monday, June 27, 2016 at 3:43:19 PM UTC-7, Christian Hammond wrote: >>>>>>> >>>>>>> Hi Cathy, >>>>>>> >>>>>>> Progress is good! I think I'll need more info on your setup at this >>>>>>> point though. >>>>>>> >>>>>>> Can you tell me more about how authentication works on your >>>>>>> Subversion setup? From the client's end, is it a standard >>>>>>> username/password, or is more involved? >>>>>>> >>>>>>> What does the server setup look like? >>>>>>> >>>>>>> The error message shown there ("Error running context: An error >>>>>>> occurred during authentication") is coming from Subversion itself. >>>>>>> >>>>>>> Christian >>>>>>> >>>>>>> >>>>>>> >>>>>>> -- >>>>>>> Christian Hammond >>>>>>> President/CEO of Beanbag <https://www.beanbaginc.com/> >>>>>>> Makers of Review Board <https://www.reviewboard.org/> >>>>>>> >>>>>>> On Mon, Jun 27, 2016 at 10:06 AM, Cathy Mullican <cmul...@gmail.com> >>>>>>> wrote: >>>>>>> >>>>>>>> OK, it definitely works better when you don't accidentally skip a >>>>>>>> step! >>>>>>>> >>>>>>>> I can now successfully do svn info from the command line, but I >>>>>>>> still can't create the repo in RB. The error message in the log is now: >>>>>>>> >>>>>>>> 2016-06-27 17:00:00,253 - ERROR - - SVN: Failed to get repository >>>>>>>> information for https://az-fs1.revshare.int/svn/rad: Unable to >>>>>>>> connect to a repository at URL 'https://az-fs1.revshare.int/svn/rad >>>>>>>> ' >>>>>>>> Error running context: An error occurred during authentication >>>>>>>> >>>>>>>> No more ra_serf error, so that's progress, at least! But also >>>>>>>> nothing very informative, at least to my eye. >>>>>>>> >>>>>>>> On Monday, June 27, 2016 at 9:45:50 AM UTC-7, Cathy Mullican wrote: >>>>>>>>> >>>>>>>>> I did >>>>>>>>> apt-get source python-svn >>>>>>>>> then started trying to follow the directions in INSTALL.html, but >>>>>>>>> they didn't work at all...although lookin gback now, some of that may >>>>>>>>> have >>>>>>>>> been because it was Friday afternoon and I missed something; I'm >>>>>>>>> trying >>>>>>>>> again now. >>>>>>>>> >>>>>>>>> On Friday, June 24, 2016 at 5:44:51 PM UTC-7, Christian Hammond >>>>>>>>> wrote: >>>>>>>>>> >>>>>>>>>> Hi Cathy, >>>>>>>>>> >>>>>>>>>> How are you trying to build from source? It is a bit of a pain to >>>>>>>>>> do from the upstream source, but perhaps you can rebuild the deb. >>>>>>>>>> >>>>>>>>>> Christian >>>>>>>>>> >>>>>>>>>> -- >>>>>>>>>> Christian Hammond >>>>>>>>>> President/CEO of Beanbag <https://www.beanbaginc.com/> >>>>>>>>>> Makers of Review Board <https://www.reviewboard.org/> >>>>>>>>>> >>>>>>>>>> On Fri, Jun 24, 2016 at 4:37 PM, Cathy Mullican < >>>>>>>>>> cmul...@gmail.com> wrote: >>>>>>>>>> >>>>>>>>>>> The stock libserf in Ubuntu 14.04 lacks GSSAPI support, which is >>>>>>>>>>> why I have to build that from source. ( >>>>>>>>>>> https://bugs.launchpad.net/ubuntu/+source/serf/+bug/1303167 -- >>>>>>>>>>> why they never released a fixed version, when the patch is right >>>>>>>>>>> there in >>>>>>>>>>> the ticket, I can't say.) Everything except libserf is stock. >>>>>>>>>>> >>>>>>>>>>> Trying to reinstall pysvn with apt tells me it's already up to >>>>>>>>>>> date; trying to build from source is...not working well, but that's >>>>>>>>>>> probably going off into the weeds. >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> On Friday, June 24, 2016 at 4:06:12 PM UTC-7, Christian Hammond >>>>>>>>>>> wrote: >>>>>>>>>>>> >>>>>>>>>>>> Hi Cathy, >>>>>>>>>>>> >>>>>>>>>>>> This might be an incompatibility between libsvn and pysvn. You >>>>>>>>>>>> may need to now recompile pysvn and replace the copies on the >>>>>>>>>>>> filesystem. >>>>>>>>>>>> That or go back to purely system libs for svn, libsvn, pysvn, >>>>>>>>>>>> serf, etc. >>>>>>>>>>>> >>>>>>>>>>>> Christian >>>>>>>>>>>> >>>>>>>>>>>> -- >>>>>>>>>>>> Christian Hammond >>>>>>>>>>>> President/CEO of Beanbag <https://www.beanbaginc.com/> >>>>>>>>>>>> Makers of Review Board <https://www.reviewboard.org/> >>>>>>>>>>>> >>>>>>>>>>>> On Fri, Jun 24, 2016 at 1:54 PM, Cathy Mullican < >>>>>>>>>>>> cmul...@gmail.com> wrote: >>>>>>>>>>>> >>>>>>>>>>>>> Same error with the repository root path -- I actually started >>>>>>>>>>>>> with that. >>>>>>>>>>>>> >>>>>>>>>>>>> I enabled logging, and now have this error message: >>>>>>>>>>>>> 2016-06-24 20:29:24,091 - ERROR - - SVN: Failed to get >>>>>>>>>>>>> repository information for https://az-fs1.revshare.int/svn/rad: >>>>>>>>>>>>> ra_serf was compiled for serf 1.3.8 but loaded an incompatible >>>>>>>>>>>>> 32676.1946284232.32676 library >>>>>>>>>>>>> >>>>>>>>>>>>> Which I thought told me what I needed; Ubuntu 14.0.4 ships >>>>>>>>>>>>> with serf 1.3.3 -- but I've upgraded to 1.3.8 (built from source, >>>>>>>>>>>>> confirmed >>>>>>>>>>>>> GSSAPI support included), and I'm still getting the same error. >>>>>>>>>>>>> >>>>>>>>>>>>> I can successfully run svn info on the commend line; the >>>>>>>>>>>>> Ubuntu box is joined to the AD domain. >>>>>>>>>>>>> >>>>>>>>>>>>> On Friday, June 24, 2016 at 1:04:19 PM UTC-7, Christian >>>>>>>>>>>>> Hammond wrote: >>>>>>>>>>>>>> >>>>>>>>>>>>>> Hi Cathy, >>>>>>>>>>>>>> >>>>>>>>>>>>>> You may need to enable logging in Admin UI -> Logging >>>>>>>>>>>>>> Settings. >>>>>>>>>>>>>> >>>>>>>>>>>>>> For the SVN repository path, you'll need to point it to the >>>>>>>>>>>>>> root of the SVN repository, rather than a subdirectory within >>>>>>>>>>>>>> it. >>>>>>>>>>>>>> Basically, the "Repository Root" value from "svn info". >>>>>>>>>>>>>> >>>>>>>>>>>>>> See if that fixes it. If not, I'll help with some additional >>>>>>>>>>>>>> commands you can try on the server to better diagnose this. >>>>>>>>>>>>>> >>>>>>>>>>>>>> One last thing: Make sure to enter your credentials in the >>>>>>>>>>>>>> Username/Password fields again once you've hit an error like >>>>>>>>>>>>>> this. The >>>>>>>>>>>>>> browser has a nasty tendency to overwrite the values you've >>>>>>>>>>>>>> provided with >>>>>>>>>>>>>> what's in the password manager. We've worked around this several >>>>>>>>>>>>>> times in >>>>>>>>>>>>>> the past, but some browsers (ahem, Chrome) have been working >>>>>>>>>>>>>> tirelessly to >>>>>>>>>>>>>> override what webapp developers want in this regard. >>>>>>>>>>>>>> >>>>>>>>>>>>>> Christian >>>>>>>>>>>>>> >>>>>>>>>>>>>> -- >>>>>>>>>>>>>> Christian Hammond >>>>>>>>>>>>>> President/CEO of Beanbag <https://www.beanbaginc.com/> >>>>>>>>>>>>>> Makers of Review Board <https://www.reviewboard.org/> >>>>>>>>>>>>>> >>>>>>>>>>>>>> On Fri, Jun 24, 2016 at 12:51 PM, Cathy Mullican < >>>>>>>>>>>>>> cmul...@gmail.com> wrote: >>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> <https://lh3.googleusercontent.com/-HPUcudJKt-Y/V22OjqvsWXI/AAAAAAAABKg/6upZE0bJH6QZYheLe24Ub-JCdaUM5gCDwCLcB/s1600/rb_error.PNG> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> There's not much to show -- see the attached screenshot. >>>>>>>>>>>>>>> That is the correct URL, as shown by svn info, and googling >>>>>>>>>>>>>>> tells me that's >>>>>>>>>>>>>>> the message I'd see with an authentication error. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> There are no files in /var/www/rb.revshare.int/logs/ ; is >>>>>>>>>>>>>>> there another location I should be checking? >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> I've used RB before, but this is the first time I've set it >>>>>>>>>>>>>>> up. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> <https://lh3.googleusercontent.com/-HPUcudJKt-Y/V22OjqvsWXI/AAAAAAAABKg/6upZE0bJH6QZYheLe24Ub-JCdaUM5gCDwCLcB/s1600/rb_error.PNG> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> On Friday, June 24, 2016 at 1:23:24 AM UTC-7, Christian >>>>>>>>>>>>>>> Hammond wrote: >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Hi Cathy, >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Can you show me what errors you're seeing, along with the >>>>>>>>>>>>>>>> configuration set for the repository? Also, is there anything >>>>>>>>>>>>>>>> in the Review >>>>>>>>>>>>>>>> Board log files? >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Christian >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> -- >>>>>>>>>>>>>>>> Christian Hammond >>>>>>>>>>>>>>>> President/CEO of Beanbag <https://www.beanbaginc.com/> >>>>>>>>>>>>>>>> Makers of Review Board <https://www.reviewboard.org/> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> On Thu, Jun 23, 2016 at 5:06 PM, Cathy Mullican < >>>>>>>>>>>>>>>> cmul...@gmail.com> wrote: >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> I have RB 2.5.6.1 set up and working on Ubuntu 14.04, with >>>>>>>>>>>>>>>>> AD authentication -- I can log in to RB as admin or as my >>>>>>>>>>>>>>>>> domain user. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Now I'm trying to add a repo. Our SVN repo runs under >>>>>>>>>>>>>>>>> VisualSVN (Pro), with AD authentication. I can set up the >>>>>>>>>>>>>>>>> server to join >>>>>>>>>>>>>>>>> the group, and run svn info from the command line >>>>>>>>>>>>>>>>> successfully, but I get >>>>>>>>>>>>>>>>> errors trying to create the repo. Not really sure where to go >>>>>>>>>>>>>>>>> with it from >>>>>>>>>>>>>>>>> here; any suggestions? >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> -- >>>>>>>>>>>>>>>>> Supercharge your Review Board with Power Pack: >>>>>>>>>>>>>>>>> https://www.reviewboard.org/powerpack/ >>>>>>>>>>>>>>>>> Want us to host Review Board for you? Check out RBCommons: >>>>>>>>>>>>>>>>> https://rbcommons.com/ >>>>>>>>>>>>>>>>> Happy user? Let us know! >>>>>>>>>>>>>>>>> https://www.reviewboard.org/users/ >>>>>>>>>>>>>>>>> --- >>>>>>>>>>>>>>>>> You received this message because you are subscribed to >>>>>>>>>>>>>>>>> the Google Groups "reviewboard" group. >>>>>>>>>>>>>>>>> To unsubscribe from this group and stop receiving emails >>>>>>>>>>>>>>>>> from it, send an email to reviewboard...@googlegroups.com. >>>>>>>>>>>>>>>>> For more options, visit https://groups.google.com/d/optout >>>>>>>>>>>>>>>>> . >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> -- >>>>>>>>>>>>>>> Supercharge your Review Board with Power Pack: >>>>>>>>>>>>>>> https://www.reviewboard.org/powerpack/ >>>>>>>>>>>>>>> Want us to host Review Board for you? Check out RBCommons: >>>>>>>>>>>>>>> https://rbcommons.com/ >>>>>>>>>>>>>>> Happy user? Let us know! https://www.reviewboard.org/users/ >>>>>>>>>>>>>>> --- >>>>>>>>>>>>>>> You received this message because you are subscribed to the >>>>>>>>>>>>>>> Google Groups "reviewboard" group. >>>>>>>>>>>>>>> To unsubscribe from this group and stop receiving emails >>>>>>>>>>>>>>> from it, send an email to reviewboard...@googlegroups.com. >>>>>>>>>>>>>>> For more options, visit https://groups.google.com/d/optout. >>>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>> -- >>>>>>>> Supercharge your Review Board with Power Pack: >>>>>>>> https://www.reviewboard.org/powerpack/ >>>>>>>> Want us to host Review Board for you? Check out RBCommons: >>>>>>>> https://rbcommons.com/ >>>>>>>> Happy user? Let us know! https://www.reviewboard.org/users/ >>>>>>>> --- >>>>>>>> You received this message because you are subscribed to the Google >>>>>>>> Groups "reviewboard" group. >>>>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>>>> send an email to reviewboard...@googlegroups.com. >>>>>>>> >>>>>>>> For more options, visit https://groups.google.com/d/optout. >>>>>>>> >>>>>>> >>>>>>> >>>>> >> >> -- >> -- >> Christian Hammond >> President/CEO of Beanbag <https://www.beanbaginc.com/> >> Makers of Review Board <https://www.reviewboard.org/> >> >> -- Supercharge your Review Board with Power Pack: https://www.reviewboard.org/powerpack/ Want us to host Review Board for you? Check out RBCommons: https://rbcommons.com/ Happy user? Let us know! https://www.reviewboard.org/users/ --- You received this message because you are subscribed to the Google Groups "reviewboard" group. To unsubscribe from this group and stop receiving emails from it, send an email to reviewboard+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
