Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I had a working subversion server which used the passwd file which stores passwords in clear text. My requirements changed so that passwords now need to be encrypted. I did everything according to the book to use SASL, or so I believe, but now only the linux command line can authenticate. My OSX users, which also use command line, and my WinXp users, which use TortoiseSVN get errors. Linux versions are 1.6.11. OSX versions are 1.6.17. And TortoiseSVN versions are 1.7.4.

/opt/subversion/QRpage/conf/svnserve.conf:

[general]
anon-access = none
auth-access = write
realm = ABC

[sasl]
use-sasl = true
min-encryption = 128
max-encryption = 256

/etc/sasl2/svn.conf:

pwcheck_method: auxprop
auxprop_plugin: sasldb
sasldb_path: /etc/sasldb2
mech_list: DIGEST-MD5

Then I add new users via:

saslpasswd2 -c -f /etc/sasldb2 -u ABC dacracot

But for instance OSX users get this error trying to check out:

$ svn co svn://svn.nowhere.org/QRpage
svn: Cannot negotiate authentication mechanism
share|improve this question
add comment

1 Answer

Your clients need to be set up for SASL digest authentication too for this to work. For information on how to set this up for Tortoise, see here. Yes, it's a pain.

The svnserve protocol is not built for encryption or security at all. Consider using https with mod_dav_svn instead.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.