Mailing-List: contact dev-help@subversion.apache.org; run by ezmlm
Precedence: bulk
Received-SPF: pass (athena.apache.org: domain of lieven.govaerts@gmail.com
 designates 209.85.160.49 as permitted sender)
MIME-Version: 1.0
Sender: lieven.govaerts@gmail.com
In-Reply-To: 
 <CABw-3YfVV8DW07CveV8v0ZiLeP3E4uQCLxdFhTzH9PACYQ1hhg@mail.gmail.com>
References: 
 <CANvU9scB6F+5BDk71mMjRPt4DKaHaOpzK=nVdTZF--MmC_nbiA@mail.gmail.com>
 <CABw-3YfVV8DW07CveV8v0ZiLeP3E4uQCLxdFhTzH9PACYQ1hhg@mail.gmail.com>
From: Lieven Govaerts <lgo@apache.org>
Date: Tue, 4 Jun 2013 13:19:46 +0200
Message-ID: 
 <CANvU9sfgZzJ=YpsO+CZWnspNbhcBiTWzy+QR1SRxCdzt+Q9NeQ@mail.gmail.com>
Subject: Re: Should missing smart card support not be added in the release
 notes?
To: Ivan Zhakov <ivan@visualsvn.com>
Cc: Subversion Development <dev@subversion.apache.org>
Content-Type: text/plain; charset=ISO-8859-1

On Tue, Jun 4, 2013 at 12:55 PM, Ivan Zhakov <ivan@visualsvn.com> wrote:
> On Tue, Jun 4, 2013 at 2:51 PM, Lieven Govaerts <lgo@apache.org> wrote:
>> Hi,
>>
>>
>> see subject. Serf and ra_serf don't have smart card support at this
>> moment, unlike neon.
>>
>> I'd expected this to be mentioned in the release notes for 1.8.0 as
>> this is not new information (at least I hope so), but I can't find
>> anything about it.
>>
> Serf doesn't support smart cards for SSL based authentication, but
> SPNego (Kerberos/NTLM) smart authentication works fine.

Ah, didn't know that. So you use your smart card to log in to Windows
and/or to the domain, which then enables single sign-on to a
Kerberos-enabled svn server right?

In such a scenario, would you make the SSL layer additionally request
a valid client certificate?

Lieven