Problems with Trac Explorer and GSSAPI/SPNEGO

32 views
Skip to first unread message

RoboJ1M

unread,
Dec 9, 2009, 9:23:37 AM12/9/09
to Trac Explorer
Hi,

I'm setting up an SVN/Trac development colaboration enviroment using
Trac Explorer but we're having problems with http authentication
between trac explorer and apache.

The server runs Ubuntu 8.04, Apache 2.2 and mod_auth_kerberos.
It is an active directory domain member through the use of the
Likewise suite of tools.

We have fully functioning Single Sign On (SSO) working between the
Windows XP client machines and Apache (including basic authentication
fall back).

But the auth between Trac Explorer and Apache is broken, putting in a
domain user name and password gets you this in the apache error log:

gss_display_name() failed: A required input parameter could not be
read (Unknown error)

And in access.log:

"POST /trac/login/xmlrpc HTTP/1.1" 401 565 "-" "XML-RPC.NET"
"POST /trac/login/xmlrpc HTTP/1.1" 500 708 "-" "XML-RPC.NET"

I used to have it working with trac on IIS using integrated
authentication with basic auth fallback, but this GSSAPI/Kerberos
doesn't seem to mesh properly.

Can anybody help us with this? Is there any chance of getting Trac
Explorer fixed any more?

Many Thanks,

James.

RoboJ1M

unread,
Dec 9, 2009, 11:49:44 AM12/9/09
to Trac Explorer
Hi,

I have fixed the problem. I checked out the source code for Trac
Explorer and fixed it.
I added a third authentication option to AddNewServerForm and changed
the Authentication property in ServerDetails to a new enum,
AuthenticationTypes, from the simple bool it was before.

Can I commit this back to the public svn repo or do I email the .patch
file I've created of the changes to somebody?

Anyway, many thanks for a great piece of software! It certainly makes
TortoiseSVN + trac + svn a great combination!

Regards,

James.

Jan Linnenkohl

unread,
Dec 10, 2009, 2:08:45 PM12/10/09
to tracex...@googlegroups.com
Hello James,

please Email the patch to this forum, I will add it to the repository.

Thanks Jan

-----Ursprüngliche Nachricht-----
Von: tracex...@googlegroups.com [mailto:tracex...@googlegroups.com] Im
Auftrag von RoboJ1M
Gesendet: Mittwoch, 9. Dezember 2009 17:50
An: Trac Explorer
Betreff: [tracexplorer] Re: Problems with Trac Explorer and GSSAPI/SPNEGO
--

You received this message because you are subscribed to the Google Groups
"Trac Explorer" group.
To post to this group, send email to tracex...@googlegroups.com.
To unsubscribe from this group, send email to
tracexplorer...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/tracexplorer?hl=en.


James Neave

unread,
Dec 15, 2009, 8:43:53 AM12/15/09
to tracex...@googlegroups.com
Hi,
 
Sorry for the delay, file was at work and I was on holiday.
Please see attached.
 
Regards,
 
James.
TracExplorer_SPNEGOAuthFix.patch

Jan Linnenkohl

unread,
Dec 15, 2009, 2:29:04 PM12/15/09
to Trac Explorer
Hi James,

I comitted the patch as revision 86.

Thanks a lot!

Jan
Reply all
Reply to author
Forward
0 new messages