Bug#797216: libapache2-mod-svn: path based authentication fails with kerberos

2015-09-03 Thread James McCoy
On Thu, Sep 03, 2015 at 07:35:54PM +0200, Andreas Korsten wrote: > * James McCoy wrote: > > Thanks. One last thing. Would you be able to perform the same test > > against a server running unstable's libapache2-mod-svn, apache2, etc.? > > I had to install a new machine, hence the delay. Understa

Bug#797216: libapache2-mod-svn: path based authentication fails with kerberos

2015-09-03 Thread Andreas Korsten
* James McCoy wrote: > Thanks. One last thing. Would you be able to perform the same test > against a server running unstable's libapache2-mod-svn, apache2, etc.? I had to install a new machine, hence the delay. Another thing I noticed: If I replace "* =" by "* = r" (which in my case means "any

Bug#797216: libapache2-mod-svn: path based authentication fails with kerberos

2015-09-01 Thread James McCoy
On Tue, Sep 01, 2015 at 04:47:33PM +0200, Andreas Korsten wrote: > * James McCoy wrote: > > With the 1.7 client, would you be able to provide the (sanitized) output > > of “svn --config-option servers:global:neon-debug-mask=130 ls > > https://${FQDN}/svn-krb/${REPO}” with both the pre-upgrade serve

Bug#797216: libapache2-mod-svn: path based authentication fails with kerberos

2015-09-01 Thread Andreas Korsten
* James McCoy wrote: > With the 1.7 client, would you be able to provide the (sanitized) output > of “svn --config-option servers:global:neon-debug-mask=130 ls > https://${FQDN}/svn-krb/${REPO}” with both the pre-upgrade server and > the post-upgrade server? Here we go. Not very sanitized, I'm af

Bug#797216: libapache2-mod-svn: path based authentication fails with kerberos

2015-08-31 Thread James McCoy
On Mon, Aug 31, 2015 at 04:09:25PM +0200, Andreas Korsten wrote: > * James McCoy wrote: > > As shown in the working example, an initial 401 is expected. The client > > should retry with the auth. The question is why that isn't happening. > > > > What does “svn --version” show? > > All clients I

Bug#797216: libapache2-mod-svn: path based authentication fails with kerberos

2015-08-31 Thread Andreas Korsten
* James McCoy wrote: > As shown in the working example, an initial 401 is expected. The client > should retry with the auth. The question is why that isn't happening. > > What does “svn --version” show? All clients I tried showed the same behaviour. The first one was: |svn, version 1.7.19 (r1

Bug#797216: libapache2-mod-svn: path based authentication fails with kerberos

2015-08-28 Thread James McCoy
On Fri, Aug 28, 2015 at 05:48:29PM +0200, Andreas Korsten wrote: > after the recent security upgrade, kerberos authentication no longer > works with libapache2-mod-auth-kerb (it never worked with > libapache2-mod-auth-gssapi). > > Output of the svn client: > > % svn ls https://${FQDN}/svn-krb/${R

Bug#797216: libapache2-mod-svn: path based authentication fails with kerberos

2015-08-28 Thread Andreas Korsten
Package: libapache2-mod-svn Version: 1.8.10-6+deb8u1 Severity: important Dear Maintainer, after the recent security upgrade, kerberos authentication no longer works with libapache2-mod-auth-kerb (it never worked with libapache2-mod-auth-gssapi). Apache configuration: DAV svn S