Mantis - SVNKit
Viewing Issue Advanced Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
283 bug major always 2008-11-15 22:29 2009-03-03 17:15
Reporter: cesnek Platform:  
Assigned To: oka OS:  
Priority: normal OS Version:  
Status: feedback Product Version: 1.2.0  
Product Build: Resolution: reopened  
Projection: none      
ETA: none Fixed in Version: 1.2.1  
planned for version: 1.2.x
Summary: 0000283: NTLM Authentication broken between 1.2.0-rc4 and 1.2.0(-final)
Description: Can not login into repository with NTLM, when not in domain user account.
When I am logged in windows in domain user account all works well.
But when I am logged in local(=NON DOMAIN) account, I cant connect to repository with NTLM auth.
Steps To Reproduce:
Additional Information: idea-8.0-M1 (SVNKit 1.2.0-beta4) - WORKING
idea-8.0 (SVNKit 1.2.0) - NOT WORKING

My builds from SVNKit repository and patches IDEA:
idea-8.0 (SVNKit 1.2.0-rc4) - WORKING
idea-8.0 (SVNKit 1.2.1 (trunk)) - NOT WORKING
Relationships
Attached Files:
Issue History
Date Modified Username Field Change
2008-11-15 22:29 cesnek New Issue
2008-11-15 22:58 oka Status new => assigned
2008-11-15 22:58 oka Assigned To => oka
2008-11-18 19:28 oka Note Added: 0000541
2008-11-18 19:40 cesnek Note Added: 0000544
2008-12-05 22:45 oka planned for version => 1.2.x
2008-12-05 22:45 oka Note Added: 0000557
2008-12-05 22:45 oka Status assigned => resolved
2008-12-05 22:45 oka Resolution open => fixed
2008-12-05 22:45 oka Fixed in Version => 1.2.1
2009-02-20 17:03 cesnek Status resolved => feedback
2009-02-20 17:03 cesnek Resolution fixed => reopened
2009-02-20 17:03 cesnek Note Added: 0000572
2009-02-20 17:04 cesnek Issue Monitored: cesnek
2009-03-03 17:15 cesnek Note Added: 0000573

Notes
(0000541)
oka   
2008-11-18 19:28   
In SVNKit 1.2.1 (in 1.2.x branch) we have introduced new implementation of NTLM authentication support - this is why NTLM may work differently with new version of SVNKit.

You said that you could not log in, when not logged into domain already. Are you prompted for a password? Do you get any particular error message?

Could you please download SVNKit-based command line client (https://teamcity.svnkit.com/repository/download/bt14/4147:id/deploy/org.tmatesoft.svn_1.2.0.5153.standalone.zip [^] ) and try performing any operation with it, e.g.: "jsvn co --username domainName --password yourPassword URL PATH".

Specify your domain name (either in form DOMAIN\\user or just as user) and domain password. Please let me know whether it works for you - this will help to understand exact reason of the problem.

Also, you may disable new NTLM support in SVNKit by setting the following system property for IDEA:

svnkit.http.methods=Basic,Digest,Negotiate,NTLM

Setting above property will make SVNKit prefer Basic authentication scheme over NTLM.

Thanks!
(0000544)
cesnek   
2008-11-18 19:40   
1) Endless prompt for password.
2) No error message.

3) IDEA 8.0 final it is not working and contains SVNKit SVN/1.5.2 SVNKit/1.2.0 (http://svnkit.com/) [^] r5066 - NOT 1.2.1 as you said.

Repeat this should be easy. Active Directory, Windows workstation, IDEA 8 final.
(0000557)
oka   
2008-12-05 22:45   
In 1.2.1 version of SVNKit Java implementation of NTLM is used by default, which have to resolve this issue. I think IDEA 8.0.1 includes that fix.
(0000572)
cesnek   
2009-02-20 17:03   
IDEA 8.1 (SVNKit/1.2.1 (http://svnkit.com/) [^] r5363)

Not solved and even worst. Now can't login into SVN even from domain account.
(Previously cant login only from local account).


We are going to send this to official IDEA support.
(0000573)
cesnek   
2009-03-03 17:15   
svnkit.http.methods=Basic,Digest,Negotiate,NTLM

successfully bypass NTLM authentization. We can work again. :-)

(NTLM still dont working for us)