Return-Path: X-Original-To: apmail-subversion-users-archive@minotaur.apache.org Delivered-To: apmail-subversion-users-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 20B5D17A20 for ; Tue, 6 Jan 2015 21:40:13 +0000 (UTC) Received: (qmail 16568 invoked by uid 500); 6 Jan 2015 21:40:13 -0000 Delivered-To: apmail-subversion-users-archive@subversion.apache.org Received: (qmail 16536 invoked by uid 500); 6 Jan 2015 21:40:13 -0000 Mailing-List: contact users-help@subversion.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@subversion.apache.org Received: (qmail 16510 invoked by uid 99); 6 Jan 2015 21:40:11 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 06 Jan 2015 21:40:11 +0000 X-ASF-Spam-Status: No, hits=-2.3 required=5.0 tests=RCVD_IN_DNSWL_MED,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of JT.Miller@l-3com.com designates 166.20.51.112 as permitted sender) Received: from [166.20.51.112] (HELO smtp2out.l-3com.com) (166.20.51.112) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 06 Jan 2015 21:39:44 +0000 From: JT.Miller@L-3com.com X-filenames: X-filesizes: None X-filetypes: X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.07,710,1413244800"; d="scan'208";a="13024031" Received: from generichost.l-3com.com (HELO PLNEXCH01.mtg.l-3com.com) ([148.104.85.6]) by smtp2out.l-3com.com with ESMTP; 06 Jan 2015 21:39:41 +0000 Received: from PLNEXCH01.mtg.l-3com.com ([148.104.85.6]) by PLNEXCH01.mtg.l-3com.com ([148.104.85.6]) with mapi id 14.03.0195.001; Tue, 6 Jan 2015 15:39:40 -0600 To: "users@subversion.apache.org" Subject: Authentication Questions Thread-Topic: Authentication Questions Thread-Index: AdAp+UZWiaHTIYxXTC2YJSCoAs3ooA== Date: Tue, 6 Jan 2015 21:39:40 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [148.104.82.98] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Virus-Checked: Checked by ClamAV on apache.org Debugging other issues, I turned on verbose logging and was curious if the = below traffic was typical. This may well be correct, as we have path-based = authentication requiring valid NTLM users. Server is Windows 2008 R2, Apach= e 2.4, NTLM, and SVN 1.8.=20 [Tue Jan 06 15:18:28.378306 2015] [authz_core:debug] [pid 15392:tid 16884] = mod_authz_core.c(799): [client USER_IP:55559] AH01626: authorization result= of Require valid-user : denied (no authenticated user yet) [Tue Jan 06 15:18:28.378306 2015] [authz_core:debug] [pid 15392:tid 16884] = mod_authz_core.c(799): [client USER_IP:55559] AH01626: authorization result= of : denied (no authenticated user yet) [Tue Jan 06 15:18:28.378306 2015] [authnz_sspi:debug] [pid 15392:tid 16884]= mod_authnz_sspi_authentication.c(439): [client USER_IP:55559] SSPI00001: E= ntering authenticate_sspi_user() [Tue Jan 06 15:18:28.378306 2015] [authnz_sspi:debug] [pid 15392:tid 16884]= mod_authnz_sspi_authentication.c(544): [client USER_IP:55559] SSPI00009: A= uthenticated user: USER_NAME [Tue Jan 06 15:18:28.378306 2015] [authz_svn:debug] [pid 15392:tid 16884] m= od_authz_svn.c(400): [client USER_IP:55559] Path to authz file is D:/svn/co= nfig/svnaccess.conf [Tue Jan 06 15:18:28.378306 2015] [authz_svn:info] [pid 15392:tid 16884] [c= lient USER_IP:55559] Access granted: 'USER_NAME' GET REPO:/PATH_TO_FILE There are hundreds to thousands of the above entry pattern for each user as= they browse the repository (over 6 hours log is ~420MB with ~2.4M entries)= .=20 I guess there's no caching of credentials since the path-based authenticati= on file can change at any time? Regards, JT Miller L-3 Mustang Technology