Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I had a working subversion server which used the passwd file which stores passwords in clear text. My requirements changed so that passwords now need to be encrypted. I did everything according to the book to use SASL, or so I believe, but now only the linux command line can authenticate. My OSX users, which also use command line, and my WinXp users, which use TortoiseSVN get errors. Linux versions are 1.6.11. OSX versions are 1.6.17. And TortoiseSVN versions are 1.7.4.


anon-access = none
auth-access = write
realm = ABC

use-sasl = true
min-encryption = 128
max-encryption = 256


pwcheck_method: auxprop
auxprop_plugin: sasldb
sasldb_path: /etc/sasldb2
mech_list: DIGEST-MD5

Then I add new users via:

saslpasswd2 -c -f /etc/sasldb2 -u ABC dacracot

But for instance OSX users get this error trying to check out:

$ svn co svn://
svn: Cannot negotiate authentication mechanism
share|improve this question

Your clients need to be set up for SASL digest authentication too for this to work. For information on how to set this up for Tortoise, see here. Yes, it's a pain.

The svnserve protocol is not built for encryption or security at all. Consider using https with mod_dav_svn instead.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.