subversion-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Michael Osipov (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (SVN-4641) silent incomplete checkout with Kerberos timeout
Date Sun, 18 Sep 2016 19:13:21 GMT

    [ https://issues.apache.org/jira/browse/SVN-4641?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15501492#comment-15501492
] 

Michael Osipov edited comment on SVN-4641 at 9/18/16 7:12 PM:
--------------------------------------------------------------

This is an issue which cannot be neithe solved by Subversion or libserf. This is a purely
implementation-specific issue of MIT Kerberos or Heimdal.

Your approach is wrong. There are two ways of solving this issue:

1. try [{{kstart(1)}}|https://www.eyrie.org/~eagle/software/kstart/] or
2. better yet, use client keytabs with MIT Kerberos and your pain will go away. I am doing
this for quite some time now with libserf/Subversion and libcurl/curl.


was (Author: michael-o):
This is an issue which cannot be neithe solved by Subversion or libserf. This is a purely
implementation-specific issue of MIT Kerberos or Heimdal.

There are two ways of solving this issue:

1. try [{{kstart(1)}}|https://www.eyrie.org/~eagle/software/kstart/] or
2. better yet, use client keytabs with MIT Kerberos and your pain will go away. I am doing
this for quite some time now with libserf/Subversion and libcurl/curl.

> silent incomplete checkout with Kerberos timeout
> ------------------------------------------------
>
>                 Key: SVN-4641
>                 URL: https://issues.apache.org/jira/browse/SVN-4641
>             Project: Subversion
>          Issue Type: Bug
>          Components: cmdline client
>    Affects Versions: 1.8.8, 1.9.4
>         Environment: Server is Debian GNU/Linux 8, Apache 2.4, using either old SVN 1.8.10
and also when cleanly upgraded to 1.9.4 (using completely newly created svn repo), supporting
Kerberos authentication, x86_64.
> Client is Windows 2008 R2 x86_64, svn cli 1.9.4, using Kerberos authentication.
> Kerberos Tickets are valid for 5 minutes.
> Checkout takes much longer than 5 minutes.
>            Reporter: Tim-Christian Bloss
>            Priority: Critical
>              Labels: performance, security, windows
>
> When checking out by svn CLI using Kerberos tickes for authentication and checkout takes
more than 5 minutes (time that Kerberos tickets are valid), then the checkout ends with state
"success" (return code 0) but all files which could not be fetched within the validity duration
of the Kerberos ticket are missing.
> SVN also does not seem to print any warnings or information regarding this issue we could
automatically react on.
> This leads to supposedly successfull checkouts but builds do fail due to missing resources.
> Example: Large maven project structure of 200+ submodules (yes we know it's "not nice",
but there's no chance to change this!), checkout takes about 15 minutes, but after 5 minutes
checkout end with state "success", but two thirds of data volume do not get checked out, including
the main pom.xml.
> The same checkout using Debign GNU/Linux 8 x86_64 with cli 1.9.4 and basic authentication
works correct, checking all files out, taking the full expected 15 minutes for the checkout.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message