Re: RES: Subversion 1.6.13 Released

2010-10-26 Thread Andrey Repin
Greetings, Cooke, Mark!

>> > I am using SSPI alongside David's 1.6.13 builds (thanks again,
> David!)
>> > on apache on a windoze server box with no problems.
>> 
>> > From recent list traffic, issues with large commits failing seem to
> be
>> > related to timeout issues, search through the recent list for
> timeout
>> > and see if any of the suggestions there can help you.
>> 
>> Which Apache version/SSPI module/SVN server and client you're 
>> using? For my own convenience.
>> 
> Apache latest 2.2.17 with open-ssl support, SSPI was I think the latest
> I could find (the windoze file properties dialog reports the module file
> version as 1.0.4.0), svn server is David Darj's 1.6.13 and client is
> latest TortoiseSVN Release 1.6.11 (2 October 2010).

Ok, I'm using both server and client 1.6.13, Apache 2.2.16 and mod_auth_sspi
1.0.0.5 (Unfortunately, the link to original post
http://www.nosq.com/blog/2008/06/fixing-mod_auth_sspi-and-ie-losing-post-data/
appears to be broken, but I do have direct DL link:
http://dev.nosq.com/downloads/mod_auth_sspi/mod_auth_sspi_1.0.5b-vc9-2.2.11.zip 
)

One last bit: Tried with 1.6.1 client and server - same issue. :(
Attached a log of that connection...

Clocks are in sync

[]$cmdtime3.exe 192.168.1.12 192.168.1.12 192.168.1.12 192.168.1.12

* CmdTime 3.0 (c) Jury Gerasimov, 2000-2002.
* Adjusting time via Internet Time Servers.
* Contact author: http://www.softshape.com

Connecting 192.168.1.12...  OK.
Connecting 192.168.1.12...  OK.
Connecting 192.168.1.12...  OK.
Connecting 192.168.1.12...  OK.

Current time   : 2010-10-26 16:38:40
Suggested time : 2010-10-26 16:38:40
Inaccuracy : 00:00:00


--
WBR,
 Andrey Repin (anrdae...@freemail.ru) 26.10.2010, <16:25>

Sorry for my terrible english...

error.log
Description: Binary data


connect.log
Description: Binary data


Re: RES: Subversion 1.6.13 Released

2010-10-25 Thread Andrey Repin
Greetings, Nico Kadel-Garcia!

>>> In case you are using LDAP authentication
>>
>> I'm using NTLM auth against that machine local accounting.
>>
>>> against an Microsoft Active Directory, please check your date and time
>>> settings including timezone.
>>
>> I'm playing EVE at the same time :) It's client tools are very sensitive to
>> timezone settings, so they are right (and time difference between workstation
>> and server never more than 30 seconds).

> *OUCH*. 30 seconds is excessive. The underlying Kerberos used by
> Active Directory is fascinatingly sensitive to time drift. You should
> really be using NTP and be within a few hundredths of a second, tops.

"Never more" does not mean it actually going that far at any present time.
Sever is indeed equipped with NTP server, and workstation clock is synchronized
with it :)
(And i'm not using AD, it's "a bit" over my league of small home server.)


--
WBR,
 Andrey Repin (anrdae...@freemail.ru) 26.10.2010, <9:14>

Sorry for my terrible english...



Re: RES: Subversion 1.6.13 Released

2010-10-25 Thread Nico Kadel-Garcia
On Mon, Oct 25, 2010 at 9:03 AM, Andrey Repin  wrote:
> Greetings, Luiz Guilherme Kimel!
>
>> In case you are using LDAP authentication
>
> I'm using NTLM auth against that machine local accounting.
>
>> against an Microsoft Active Directory, please check your date and time
>> settings including timezone.
>
> I'm playing EVE at the same time :) It's client tools are very sensitive to
> timezone settings, so they are right (and time difference between workstation
> and server never more than 30 seconds).

*OUCH*. 30 seconds is excessive. The underlying Kerberos used by
Active Directory is fascinatingly sensitive to time drift. You should
really be using NTP and be within a few hundredths of a second, tops.


RE: RES: Subversion 1.6.13 Released

2010-10-25 Thread Cooke, Mark
> -Original Message-
> From: Andrey Repin [mailto:anrdae...@freemail.ru] 
> Sent: 25 October 2010 14:03
> To: users@subversion.apache.org
> Subject: Re: RES: Subversion 1.6.13 Released
> 
> > I am using SSPI alongside David's 1.6.13 builds (thanks again,
David!)
> > on apache on a windoze server box with no problems.
> 
> > From recent list traffic, issues with large commits failing seem to
be
> > related to timeout issues, search through the recent list for
timeout
> > and see if any of the suggestions there can help you.
> 
> Which Apache version/SSPI module/SVN server and client you're 
> using? For my own convenience.
> 
Apache latest 2.2.17 with open-ssl support, SSPI was I think the latest
I could find (the windoze file properties dialog reports the module file
version as 1.0.4.0), svn server is David Darj's 1.6.13 and client is
latest TortoiseSVN Release 1.6.11 (2 October 2010).

~ mark c


Re: RES: Subversion 1.6.13 Released

2010-10-25 Thread Andrey Repin
Greetings, Luiz Guilherme Kimel!

> In case you are using LDAP authentication

I'm using NTLM auth against that machine local accounting.

> against an Microsoft Active Directory, please check your date and time
> settings including timezone.

I'm playing EVE at the same time :) It's client tools are very sensitive to
timezone settings, so they are right (and time difference between workstation
and server never more than 30 seconds).

> Your apache server (where your svn server is running behind) is an
> authentication client for the Windows Server and if there is a small
> difference between their clocks then authentication may present this exact
> behavior.  

If only it was initial auth issue, but it starting commit right away, and
break in between.

>> I have no problem committing several hundreds om MB.
>> I got no possibility to test with SSPI authentication though. Can you 
>> test without it and see if it works?

The lines where it asking for username, it's when it falling back to Basic
auth.

> I am using SSPI alongside David's 1.6.13 builds (thanks again, David!)
> on apache on a windoze server box with no problems.

> From recent list traffic, issues with large commits failing seem to be
> related to timeout issues, search through the recent list for timeout
> and see if any of the suggestions there can help you.

Which Apache version/SSPI module/SVN server and client you're using? For my
own convenience.


--
WBR,
 Andrey Repin (anrdae...@freemail.ru) 25.10.2010, <16:58>

Sorry for my terrible english...