[32045] in Kerberos
Re: Kerberos for Subversion
daemon@ATHENA.MIT.EDU (Ben Poliakoff)
Wed Feb 10 16:23:43 2010
Date: Wed, 10 Feb 2010 10:20:30 -0800
From: Ben Poliakoff <benp@reed.edu>
To: Greg Troxel <gdt@ir.bbn.com>
Message-ID: <20100210182030.GD13308@garage.reed.edu>
MIME-Version: 1.0
In-Reply-To: <rmi8wb1kx38.fsf@fnord.ir.bbn.com>
Cc: kerberos@mit.edu
Content-Type: multipart/mixed; boundary="===============1968131566=="
Errors-To: kerberos-bounces@mit.edu
--===============1968131566==
Content-Type: multipart/signed; micalg=pgp-sha256;
protocol="application/pgp-signature"; boundary="44sYDrpRTlpaXQDy"
Content-Disposition: inline
--44sYDrpRTlpaXQDy
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
* Greg Troxel <gdt@ir.bbn.com> [20100210 09:44]:
> > http://modauthkerb.sourceforge.net/
>=20
> That makes the server take passwords and validate them against the
> kerberos database, or else requires for browser-side access the
> Negotiate mechanism. It seems bad practice to send ones kerberos
> password to the server (or perhaps worse, to have svn store it), so
> obviously the only reasonable thing to do is use Negotitate.
>=20
> neon seems to have a gssapi option - does that work from svn with
> modauthkerb?
Yes it does, with reasonably recent versions. That's how we do it at my
work.
--=20
________________________________________________________________________
PGP (318B6A97): 3F23 EBC8 B73E 92B7 0A67 705A 8219 DCF0 318B 6A97
--44sYDrpRTlpaXQDy
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iQIVAwUBS3L46IIZ3PAxi2qXAQhDeA//T9auOFotAhxDBNcRxoVsvSmECwxpE36v
BhqcsNtA/WZRodLjOO8P/Bx4RiXWYDEndLjN7Z1Hh4X8qRe2ApjeTmSJSfGVyaY0
dChbWdxv8zWQPsjpZZeODGGF9FLTck3bFlH+++zOxYo4+zab0cqlne8wyQ3OK9/G
A1wBz4jNVRzfQZPK6nRMmOZ1dYA82NPF9PDw+Sr9O5//8cqH5tg4cHv+ar30sKg/
SajJyy5kp04K/7lwY4TpiI7Vbr+VIDUUi7wj0wceLgpIkhAMNifE14W0TJdzFVB8
/STcmVMdp2XJCDfW90gREbCqJc3CHQ2QFOQR3JWCB9VsFs2zSJFWSBvRCKN4QNDY
qkdTXukCAF/r6JhwT4oNCL1NuylollYCTUnt3YLY/OLq4VuSjGe2Rc4CRtvKL9rW
D3YN9zBibcgf/PFBSfgwCjETTmEzbsJEFL4U5vK8k3iLduVAm0rXJDEq3VBDPs9D
mOSaCoAva9WtEe4cEzbwpWVYaI9SZIQI9zefEpLvCpD77jmd0hgfFR50dZeK4oeb
xVaj8c5U3SLSQxwKFl08JWltI84u4EB0SEBPRrYeAMPij48oV7Fx0LwP+4hJXHvk
kELbynI/S3CE6j+Vmzkq97KF5yCrNhksTQQfZ/a+IreJQ4UtUPgdjmkyimsEdGKo
iRGng1xGyPY=
=93ei
-----END PGP SIGNATURE-----
--44sYDrpRTlpaXQDy--
--===============1968131566==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============1968131566==--
