Return-Path: X-Original-To: apmail-subversion-users-archive@minotaur.apache.org Delivered-To: apmail-subversion-users-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 601B918390 for ; Wed, 23 Mar 2016 10:36:11 +0000 (UTC) Received: (qmail 20470 invoked by uid 500); 23 Mar 2016 10:36:11 -0000 Delivered-To: apmail-subversion-users-archive@subversion.apache.org Received: (qmail 20426 invoked by uid 500); 23 Mar 2016 10:36:11 -0000 Mailing-List: contact users-help@subversion.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@subversion.apache.org Received: (qmail 20416 invoked by uid 99); 23 Mar 2016 10:36:10 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 23 Mar 2016 10:36:10 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 5FEB0C8591 for ; Wed, 23 Mar 2016 10:36:10 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -0.821 X-Spam-Level: X-Spam-Status: No, score=-0.821 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=pass (1024-bit key) header.d=visualsvn.com Received: from mx2-lw-us.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id 8WFlrcxVu_so for ; Wed, 23 Mar 2016 10:36:08 +0000 (UTC) Received: from mail-lb0-f180.google.com (mail-lb0-f180.google.com [209.85.217.180]) by mx2-lw-us.apache.org (ASF Mail Server at mx2-lw-us.apache.org) with ESMTPS id E79395FAC2 for ; Wed, 23 Mar 2016 10:36:07 +0000 (UTC) Received: by mail-lb0-f180.google.com with SMTP id oe12so7003360lbc.0 for ; Wed, 23 Mar 2016 03:36:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=visualsvn.com; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=LtjmrdDNyc/mSYUYPLS87Id0Jk/T9cbKVl6znSaU+7o=; b=QF3qpX0NkvzgLecezethvbW1ZNZXaFKSR+rgRqKLk5d4SQAS9uyJooJHLynZ9bVwGI U+0NSJAOy/fLiXxV3QKz/XIFun8loZXqgwjRz5tD463GSNHMw/eHYQEvmGBwVx2MTERt bEhM7YXTf1IPjon1k0DBTw2T6BrEYhEfdItXQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=LtjmrdDNyc/mSYUYPLS87Id0Jk/T9cbKVl6znSaU+7o=; b=aUZ+OGzZ37zXLuhWjywzdfA299i0cQCBmszMl9yaxbbtVmjtDljg/HgaXl2rORxZEG yVXTnHt8EoAl5/4hq1pkJ42sMD9iKFTg0loVYvMfLw8HP4SrLbr114NBh1qnsAtI7TZs S3P+gyU3mSQcQGmJ3Fx8PU3JpFbkHmtmJ8zUqYEqAZLmoDz3ICb+yQ92z8pg5RpNqg7n SmHYJB+2Rru5JGVlCWojP9XeI8VS5EyUchA5VXUNdapkqZOvGS6PfC8IcgeImffF4ZLC sQK2L1aCdFwtbgDhSJVP/e48Jo+kyAQq8hmyOarRA4lY3Fl+O1hAX8btiviqCJmw0B8S sfzQ== X-Gm-Message-State: AD7BkJIQ9iwe6+B+i17W+41+8An08FDE+HuHdxjPQyI2YcEBI3JHz2bY/mPSXN2CN2DsWVgk0OrufpkyH4du5HD+ X-Received: by 10.112.254.164 with SMTP id aj4mr858900lbd.130.1458729366557; Wed, 23 Mar 2016 03:36:06 -0700 (PDT) MIME-Version: 1.0 Received: by 10.25.87.140 with HTTP; Wed, 23 Mar 2016 03:35:26 -0700 (PDT) In-Reply-To: References: From: Pavel Lyalyakin Date: Wed, 23 Mar 2016 13:35:26 +0300 Message-ID: Subject: Re: VisualSVN server / Linux client To: Cathy Mullican Cc: users@subversion.apache.org, Andreas.Stieger@gmx.de Content-Type: text/plain; charset=UTF-8 Hello, On Wed, Mar 23, 2016 at 1:25 AM, Cathy Mullican wrote: > I'm trying to get a Linux svn client to work with a VisualSVN server that > has Basic authentication disabled. I've set up Kerberos on the Linux box; I > can get a ticket via kinit, join the domain, and I see service tickets for > cifs and ldap in klist after joining, so I _think_ that part is OK, although > it's definitely not my area of expertise. > > But I'm missing something, because svn gives "Error running context: The > requested authentication type(s) are not supported" when I try anything. > > Ubuntu 14.04, rebuilt serf with the patch from this ticket: > https://bugs.launchpad.net/ubuntu/+source/subversion/+bug/1303167 and > rebuilt svn, but no change. > > Any ideas? First of all, use the latest Subversion 1.9.x client. If the server has Integrated Windows Authentication enabled and the Linux machine is joined the AD domain, then the authentication over NTLM\Negotiate should work out of the box without applying any patches to the client. Make sure that this Subversion client has Negotiate auth enabled. Check "servers" file in ".subversion" directory in the user's home directory on the Linux machine. It should not have "http-auth-types" parameter modified. In your case there is a chance that that the parameter was modified. If it was modified, just comment the line with dash sign "#" to return it to defaults and save the file. You can also try the following command-line: [[[ svn info --config-option=servers:global:http-auth-types=Negotiate ]]] On Wed, Mar 23, 2016 at 11:04 AM, Andreas Stieger wrote: > >> "Error running context: The requested authentication type(s) are not supported" when I try anything. > > This binary server distribution does not support Kerberos in this configuration. You will need to use Integrated Windows Authentication feature available in the paid version. As far as I can guess, the server has Integrated Windows Authentication enabled and Basic disabled. In such case, it's the client that does not support NTLM/Negotaite (NTLM or Kerberos), not the server. It seems that the client supports or is configured to use Basic authentication only. -- With best regards, Pavel Lyalyakin VisualSVN Team