RES: Subversion 1.6.13 Released
In case you are using LDAP authentication against an Microsoft Active Directory, please check your date and time settings including timezone. Your apache server (where your svn server is running behind) is an authentication client for the Windows Server and if there is a small difference between their clocks then authentication may present this exact behavior. -Mensagem original- De: Cooke, Mark [mailto:mark.co...@siemens.com] Enviada em: segunda-feira, 25 de outubro de 2010 03:43 Para: users Cc: Andrey Repin; David Darj Assunto: RE: Subversion 1.6.13 Released > -Original Message- > From: David Darj [mailto:z...@alagazam.net] > Sent: 24 October 2010 22:48 > To: users > Cc: Andrey Repin > Subject: Re: Subversion 1.6.13 Released > > On 2010-10-24 20:12, Andrey Repin wrote: > > Greetings, David Darj! > > > > David, I have a strange issue with binaries you provided. > > I'm using SVN repository served by Apache under Win32. > > > > In attachment is a httpd-modules-svn.conf - module loading. > > Enabling it... here: > > > > > > ServerName svn.darkdragon > > ServerAlias svn.rootdir.org > > > > DocumentRoot "C:/home/svn" > > AddDefaultCharset utf-8 > > > > ErrorLog "C:/home/svn/.log/error_log" > > CustomLog "C:/home/svn/.log/access_log" common env=!SVN-ACTION > > CustomLog "C:/home/svn/.log/svn_access_log" svn env=SVN-ACTION > > > > > > meaningless> > > > > > > > > #AllowOverride Limit AuthConfig > > #Options None > > Order allow,deny > > Allow from 192.168.1.10 > > > > > > DAV svn > > SVNParentPath "C:/home/svn" > > > > > > > > Allow from all > > > > AuthName "Subversion repository" > > AuthType SSPI > > SSPIAuth On > > SSPIAuthoritative On > > SSPIOfferBasic On > > SSPIOmitDomain On > > SSPIUsernameCase lower > > SSPIBasicPreferred Off > > > > # only developers may access the repository > > Require group "DAEMON1\CVS" > > > > # And they should obey to SVN user permissions file > > > > AuthzSVNAccessFile "C:/home/svn/.registry" > > > > > > > > > > > > > > Everything works fine, when I operate with small files. > > But once I start submittings megabytes of data (~500 files, > ~10Mb size total), > > Subversion start to break on authorization, randomly asking > for password or > > username, again and again. > > > > I don't quite know, if it is specific to your builds, or is a bug in > > Subversion. I'll be glad to present any additional info. > > > > > > -- > > WBR, > > Andrey Repin (anrdae...@freemail.ru) 24.10.2010,<21:54> > > > > Sorry for my terrible english... > > Hi Andrey > > I have no problem committing several hundreds om MB. > I got no possibility to test with SSPI authentication though. Can you > test without it and see if it works? > > /David > > I am using SSPI alongside David's 1.6.13 builds (thanks again, David!) on apache on a windoze server box with no problems. >From recent list traffic, issues with large commits failing seem to be related to timeout issues, search through the recent list for timeout and see if any of the suggestions there can help you. Good luck! ~ mark c
Re: RES: Subversion 1.6.13 Released
Greetings, Luiz Guilherme Kimel! > In case you are using LDAP authentication I'm using NTLM auth against that machine local accounting. > against an Microsoft Active Directory, please check your date and time > settings including timezone. I'm playing EVE at the same time :) It's client tools are very sensitive to timezone settings, so they are right (and time difference between workstation and server never more than 30 seconds). > Your apache server (where your svn server is running behind) is an > authentication client for the Windows Server and if there is a small > difference between their clocks then authentication may present this exact > behavior. If only it was initial auth issue, but it starting commit right away, and break in between. >> I have no problem committing several hundreds om MB. >> I got no possibility to test with SSPI authentication though. Can you >> test without it and see if it works? The lines where it asking for username, it's when it falling back to Basic auth. > I am using SSPI alongside David's 1.6.13 builds (thanks again, David!) > on apache on a windoze server box with no problems. > From recent list traffic, issues with large commits failing seem to be > related to timeout issues, search through the recent list for timeout > and see if any of the suggestions there can help you. Which Apache version/SSPI module/SVN server and client you're using? For my own convenience. -- WBR, Andrey Repin (anrdae...@freemail.ru) 25.10.2010, <16:58> Sorry for my terrible english...
RE: RES: Subversion 1.6.13 Released
> -Original Message- > From: Andrey Repin [mailto:anrdae...@freemail.ru] > Sent: 25 October 2010 14:03 > To: users@subversion.apache.org > Subject: Re: RES: Subversion 1.6.13 Released > > > I am using SSPI alongside David's 1.6.13 builds (thanks again, David!) > > on apache on a windoze server box with no problems. > > > From recent list traffic, issues with large commits failing seem to be > > related to timeout issues, search through the recent list for timeout > > and see if any of the suggestions there can help you. > > Which Apache version/SSPI module/SVN server and client you're > using? For my own convenience. > Apache latest 2.2.17 with open-ssl support, SSPI was I think the latest I could find (the windoze file properties dialog reports the module file version as 1.0.4.0), svn server is David Darj's 1.6.13 and client is latest TortoiseSVN Release 1.6.11 (2 October 2010). ~ mark c
RES: RES: Subversion 1.6.13 Released
I'm using CollabNetSubversion-client-1.6.11-4.win32. Its changlog says: Changes to included binaries: * Subversion upgraded to 1.6.11 * Apache upgraded to 2.2.15 * Openssl upgraded to 0.9.8n * Neon upgraded to 0.29.3 I had similar problem with SharePoint and .net web applications running under IIS 6 with basic authentication against an active directory. Pages would ask for authentication many times until completely loaded. Users could access it, pressing ok to the authentication dialog as many times as asked by the browser. It took me sometime to figure out the timezone difference between servers, since users could authenticate after all. It was a very annoying problem. I hope you find your way out of it. -Mensagem original- De: Andrey Repin [mailto:anrdae...@freemail.ru] Enviada em: segunda-feira, 25 de outubro de 2010 10:03 Para: users@subversion.apache.org Assunto: Re: RES: Subversion 1.6.13 Released Greetings, Luiz Guilherme Kimel! > In case you are using LDAP authentication I'm using NTLM auth against that machine local accounting. > against an Microsoft Active Directory, please check your date and time > settings including timezone. I'm playing EVE at the same time :) It's client tools are very sensitive to timezone settings, so they are right (and time difference between workstation and server never more than 30 seconds). > Your apache server (where your svn server is running behind) is an > authentication client for the Windows Server and if there is a small > difference between their clocks then authentication may present this exact > behavior. If only it was initial auth issue, but it starting commit right away, and break in between. >> I have no problem committing several hundreds om MB. >> I got no possibility to test with SSPI authentication though. Can you >> test without it and see if it works? The lines where it asking for username, it's when it falling back to Basic auth. > I am using SSPI alongside David's 1.6.13 builds (thanks again, David!) > on apache on a windoze server box with no problems. > From recent list traffic, issues with large commits failing seem to be > related to timeout issues, search through the recent list for timeout > and see if any of the suggestions there can help you. Which Apache version/SSPI module/SVN server and client you're using? For my own convenience. -- WBR, Andrey Repin (anrdae...@freemail.ru) 25.10.2010, <16:58> Sorry for my terrible english...
Re: RES: Subversion 1.6.13 Released
On Mon, Oct 25, 2010 at 9:03 AM, Andrey Repin wrote: > Greetings, Luiz Guilherme Kimel! > >> In case you are using LDAP authentication > > I'm using NTLM auth against that machine local accounting. > >> against an Microsoft Active Directory, please check your date and time >> settings including timezone. > > I'm playing EVE at the same time :) It's client tools are very sensitive to > timezone settings, so they are right (and time difference between workstation > and server never more than 30 seconds). *OUCH*. 30 seconds is excessive. The underlying Kerberos used by Active Directory is fascinatingly sensitive to time drift. You should really be using NTP and be within a few hundredths of a second, tops.
Re: RES: Subversion 1.6.13 Released
Greetings, Nico Kadel-Garcia! >>> In case you are using LDAP authentication >> >> I'm using NTLM auth against that machine local accounting. >> >>> against an Microsoft Active Directory, please check your date and time >>> settings including timezone. >> >> I'm playing EVE at the same time :) It's client tools are very sensitive to >> timezone settings, so they are right (and time difference between workstation >> and server never more than 30 seconds). > *OUCH*. 30 seconds is excessive. The underlying Kerberos used by > Active Directory is fascinatingly sensitive to time drift. You should > really be using NTP and be within a few hundredths of a second, tops. "Never more" does not mean it actually going that far at any present time. Sever is indeed equipped with NTP server, and workstation clock is synchronized with it :) (And i'm not using AD, it's "a bit" over my league of small home server.) -- WBR, Andrey Repin (anrdae...@freemail.ru) 26.10.2010, <9:14> Sorry for my terrible english...
Re: RES: Subversion 1.6.13 Released
Greetings, Cooke, Mark! >> > I am using SSPI alongside David's 1.6.13 builds (thanks again, > David!) >> > on apache on a windoze server box with no problems. >> >> > From recent list traffic, issues with large commits failing seem to > be >> > related to timeout issues, search through the recent list for > timeout >> > and see if any of the suggestions there can help you. >> >> Which Apache version/SSPI module/SVN server and client you're >> using? For my own convenience. >> > Apache latest 2.2.17 with open-ssl support, SSPI was I think the latest > I could find (the windoze file properties dialog reports the module file > version as 1.0.4.0), svn server is David Darj's 1.6.13 and client is > latest TortoiseSVN Release 1.6.11 (2 October 2010). Ok, I'm using both server and client 1.6.13, Apache 2.2.16 and mod_auth_sspi 1.0.0.5 (Unfortunately, the link to original post http://www.nosq.com/blog/2008/06/fixing-mod_auth_sspi-and-ie-losing-post-data/ appears to be broken, but I do have direct DL link: http://dev.nosq.com/downloads/mod_auth_sspi/mod_auth_sspi_1.0.5b-vc9-2.2.11.zip ) One last bit: Tried with 1.6.1 client and server - same issue. :( Attached a log of that connection... Clocks are in sync []$cmdtime3.exe 192.168.1.12 192.168.1.12 192.168.1.12 192.168.1.12 * CmdTime 3.0 (c) Jury Gerasimov, 2000-2002. * Adjusting time via Internet Time Servers. * Contact author: http://www.softshape.com Connecting 192.168.1.12... OK. Connecting 192.168.1.12... OK. Connecting 192.168.1.12... OK. Connecting 192.168.1.12... OK. Current time : 2010-10-26 16:38:40 Suggested time : 2010-10-26 16:38:40 Inaccuracy : 00:00:00 -- WBR, Andrey Repin (anrdae...@freemail.ru) 26.10.2010, <16:25> Sorry for my terrible english... error.log Description: Binary data connect.log Description: Binary data
Re: RES: RES: Subversion 1.6.13 Released
Greetings, Luiz Guilherme Kimel! > I'm using CollabNetSubversion-client-1.6.11-4.win32. Its changlog says: > Changes to included binaries: > * Subversion upgraded to 1.6.11 > * Apache upgraded to 2.2.15 > * Openssl upgraded to 0.9.8n > * Neon upgraded to 0.29.3 > I had similar problem with SharePoint and .net web applications running > under IIS 6 with basic authentication against an active directory. Pages > would ask for authentication many times until completely loaded. Users could > access it, pressing ok to the authentication dialog as many times as asked > by the browser. It took me sometime to figure out the timezone difference > between servers, since users could authenticate after all. It was a very > annoying problem. I hope you find your way out of it. It is certainly not the timezone settings. Both machines are set to the same TZ and clocks usually differs by a fraction of second. -- WBR, Andrey Repin (anrdae...@freemail.ru) 26.10.2010, <9:17> Sorry for my terrible english...
