Subversion Edge + AnkhSVN using CAC authentication

69 views
Skip to first unread message

Frank Hale

unread,
Sep 16, 2012, 9:15:39 PM9/16/12
to mil...@googlegroups.com
I've recently began the process of integrating Subversion Edge,
AnkhSVN (Visual Studio SVN client plugin) and Collabnet's SVN command
line client into my development team's workflow. Naturally in a DOD
environment I want to go with CAC authentication. Starting off knowing
nothing about Subversion Edge and the various clients I started
digging and realized that the Apache configuration was the main
hurdle. I managed to knock up a somewhat working environment using the
SSPI Apache module. The main problem (but not the only one) I
encountered was that I could not get my SVN client (AnkhSVN and
Collabnet's SVN client) to cache my CAC credentials between requests
to the server. This manifested in a ridiculous amount of prompting for
credentials doing various SVN commands from Visual Studio which is
incredibly annoying. I've opted for the time being to fall back to an
LDAP configuration which works perfectly but has the side effect of
needing usernames and passwords. My question is, is there anyone on
this list that has experience with setting up a Subversion server and
client in a DOD environment that can work with CAC authentication?

Jennings, Jared L CTR USAF AFMC 96 SK/CCI

unread,
Sep 17, 2012, 10:32:03 AM9/17/12
to mil...@googlegroups.com
I've done CAC + SVN with Apache, mod_ssl or mod_nss, TortoiseSVN, and
svn. What worked to reduce prompting for us was to make sure our server
would only accept identity certificates, or only email certificates, but
not both. I'm not sure if or how that translates to mod_sspi.

-- Jared Jennings, RHCE, Network Admin, SURVICE Engineering Co.
> --
> You received this message because you are subscribed to the "Military
> Open Source Software" Google Group.
> To post to this group, send email to mil...@googlegroups.com To
> unsubscribe from this group, send email to mil-
> oss+uns...@googlegroups.com
> For more options, visit this group at
> http://groups.google.com/group/mil-oss?hl=en
>
> www.mil-oss.org
Reply all
Reply to author
Forward
0 new messages