Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of thomas.fazekas@gmail.com
 designates 64.233.162.225 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=CnERykgRGLymcUfHMl4N/dNHVxbhBEUanwTRHmx95A81rZtkGYxz+50ViaDIRYSTxIqGw9gjxRPlCLntJFgWp4UPr8c+P9sx5xVTuoJvA3TDAU0o2VStfu9sF99TpQnuKvHB6XSztVkRJQ01z4VzS1ti820ejt/a56Gk1z9FNJI=
Message-ID: <421547be0710171155q38b260eal5be0d1956fce84bd@mail.gmail.com>
Date: Wed, 17 Oct 2007 20:55:59 +0200
From: "Thomas Fazekas" <thomas.fazekas@gmail.com>
To: users@httpd.apache.org
In-Reply-To: <421547be0710160900u3de6ce75n101c9b9b488c1778@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <421547be0710160900u3de6ce75n101c9b9b488c1778@mail.gmail.com>
Subject: [users@httpd] svn access via apache with ntlm authentication

My setup :

Debian Etch i386

httpd-2.0.61 configured with the following command
"./configure --prefix=/opt/httpd-2.0.61 --with-mpm=worker --enable-so
--enable-dav=shared
--enable-unique-id=shared --enable-version=shared --enable-ssl=shared
--enable-info=shared
--enable-cgi=shared --enable-rewrite=shared --enable-cache=shared --
enable-disk-cache=shared --enable-deflate=shared"

subversion-1.4.5 configured with the following
"./configure --prefix=/opt/subversion-1.4.5 --with-apr=/opt/
httpd-2.0.61 --with-apr-util=/opt/httpd-2.0.61 --with-apxs=/opt/
httpd-2.0.61/bin/apxs"

mod_auth_ntlm_winbind AFAIK the latest version compiled with
"/opt/httpd-2.0.61/bin/apxs -DAPACHE2 -c -i mod_auth_ntlm_winbind.c"

Now, AFAIT everything is working well... separately !
Apache serves documents,
svn works for anonymous access with the following config :

<Location /svn/repos>
   DAV svn
   SVNPath /mnt/data/rep/svn
</Location /svn/repos>

I can check out projects from the repository

Then I've tested the NTLM authentication with

Alias /ntlmtest/ "/mnt/data/docuwiki/"
<Directory "/mnt/data/docuwiki">
 AuthName "NTLM Authentication"
 NTLMAuth on
 NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"
 NTLMBasicAuthoritative on
 AuthType NTLM
 require valid-user
</Directory>

This works just fine, the browser prompts for the username and
password, and ntlm authenticates against our PDC

Now my problem is with the svn + NTLM combination
If I have in my httpd.conf
<Location /svn/repos>
   DAV svn
   SVNPath /mnt/data/rep/svn
   AuthName "NTLM Authentication"
   AuthType NTLM
   NTLMAuth on
   NTLMBasicAuthoritative on
   NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"
   require valid-user
</Location>

and I do "svn co http://svnhost/svn/repos/test" ,
it seems to me that the apache server doesn't even bother calling the
ntlm_winbind module for authentication...
There are no logs or any trace of related messages and all I get is
svn: PROPFIND request failed on '/svn/repos/test'
svn: PROPFIND of '/svn/repos/test': authorization failed (http://
svnhost)
at the client side.

Any ideas ?

Thomas

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org