"Retry as different user" doesn't work

[Are Granhaug]

Hi,

My company has one unique windows user for each employee. My account has read/write access to the SVN repo and that works fine. The account format is COMPANY\username. When I use the administration program VisualSVN server, I can confirm this.

But we also have one shared user, which is not meant to have write access, only read access. If this user attempts to commit a change, the commit attempt fails and that's how it's supposed to be.

Command - Commit to https://svn.*********/Folder/ (the stars are edited by me)

Error - Commit failed (details follow):

Error - Access to 'svn/testdpt/!svn/me' forbidden

However, we often log into windows with that shared user, and those of us with read access still want the ability to use "retry as different user". However, I have failed to get that to work. I've tried my e-mail account, COMPANY\username, user...@company.com, simply username.... and of course using my windows password. When I say username I mean the name that shows up as "author" in the TortoiseSVN project monitor.

The work around is to log out with the shared user and log in with my own user, but it's a hassle, and I'm sure that button should work somehow.

Does anybody know how I can find out what the username format is? Or perhaps has some clue what's wrong here.

Thanks!

[Stefan]

On Wednesday, September 21, 2022 at 2:22:16 PM UTC+2 Are Granhaug wrote:

Hi,

My company has one unique windows user for each employee. My account has read/write access to the SVN repo and that works fine. The account format is COMPANY\username. When I use the administration program VisualSVN server, I can confirm this.

if you're using kerberos/NTLM authentication, then you can't use another user to authenticate.

https://www.visualsvn.com/support/topic/00180/

I know the old mod_auth_sspi module had an option you could set to fall back to basic authentication. I don't know if the modules VisualSVN server uses also have such an option. You should ask the VisualSVN people for help here.

 

[Are Granhaug]

Thanks, Stefan. Yes we are using Integrated Windows Authentication. Whether it is kerberos or NTLM I don't know. I'll check with VisualSVN but I guess it can't be done. We'll be able to live with this limitation. Appreciate your help!

[Stefan Pendl]

Visual-SVN allows to enable Windows authentication and basic authentication, I run such a configuration.

The internal users authenticate automatically and external ones need to manually enter the credentials once, if they enable the remember feature.

---
Stefan P.

[Pavel Lyalyakin]

Hello,

I think that Windows Credential Manager or the cmdkey utility can help in your case. You can use Windows Credential Manager to save the credentials of another account for IWA (AD Single Sign-On). You won't need to sign off and sign into Windows again with another account.

--
You received this message because you are subscribed to the Google Groups "TortoiseSVN" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tortoisesvn...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/tortoisesvn/a48759f6-9111-45f2-8205-148b482a9f8fn%40googlegroups.com.

--

With best regards,
Pavel Lyalyakin
VisualSVN Team