Re: GSSAPI auth stopped working after upgrade

2011-12-07 Thread Victor Sudakov
Sorry, it was a false alarm! The cyrus-sasl2 port was compiled incorrectly (--with-gss_impl=mit instead of --with-gss_impl=heimdal) due to a long-forgotten KRB5_HOME defined in /etc/make.conf. Everything works now. I love Unix, there are no unexplainable or random glitches :) -- Victor Sudakov

Re: GSSAPI auth stopped working after upgrade

2011-12-07 Thread Daniel Shahaf
Victor Sudakov wrote on Wed, Dec 07, 2011 at 18:22:03 +0700: > Philip Martin wrote: > > >>> > > >>> Have you tried with "mech_list: gssapi" so that the client has no > > >>> choice? > > >> > > >> Yes, in fact I wrote about it in the original post. I repeat: > > >> > > >> If I disable the digest-m

Re: GSSAPI auth stopped working after upgrade

2011-12-07 Thread Victor Sudakov
Philip Martin wrote: > >> > >> Have you tried with "mech_list: gssapi" so that the client has no choice? > > > > Yes, in fact I wrote about it in the original post. I repeat: > > > > If I disable the digest-md5 mech on the server, like > > (mech_list: gssapi anonymous), I get: > > I'm not a SASL

Re: GSSAPI auth stopped working after upgrade

2011-12-07 Thread Victor Sudakov
Philip Martin wrote: > >>> > >>> Have you tried with "mech_list: gssapi" so that the client has no choice? > >> > >> Yes, in fact I wrote about it in the original post. I repeat: > >> > >> If I disable the digest-md5 mech on the server, like > >> (mech_list: gssapi anonymous), I get: > > > > I'm n

Re: GSSAPI auth stopped working after upgrade

2011-12-07 Thread Philip Martin
Philip Martin writes: > Victor Sudakov writes: > >> Philip Martin wrote: >>> >>> Have you tried with "mech_list: gssapi" so that the client has no choice? >> >> Yes, in fact I wrote about it in the original post. I repeat: >> >> If I disable the digest-md5 mech on the server, like >> (mech_list

Re: GSSAPI auth stopped working after upgrade

2011-12-07 Thread Philip Martin
Victor Sudakov writes: > Philip Martin wrote: >> >> Have you tried with "mech_list: gssapi" so that the client has no choice? > > Yes, in fact I wrote about it in the original post. I repeat: > > If I disable the digest-md5 mech on the server, like > (mech_list: gssapi anonymous), I get: I'm no

Re: GSSAPI auth stopped working after upgrade

2011-12-07 Thread Victor Sudakov
Philip Martin wrote: > > > I have upgraded the svn client from subversion-1.6.17 to > > subversion-1.7.2 on FreeBSD 7.4 and GSSAPI authentication stopped > > working. svn does not even try to get a Kerberos ticket and tries to > > use DIGEST-MD5 at once. The server is still subversion-1.6.16_1 (no

Re: GSSAPI auth stopped working after upgrade

2011-12-07 Thread Philip Martin
Victor Sudakov writes: > I have upgraded the svn client from subversion-1.6.17 to > subversion-1.7.2 on FreeBSD 7.4 and GSSAPI authentication stopped > working. svn does not even try to get a Kerberos ticket and tries to > use DIGEST-MD5 at once. The server is still subversion-1.6.16_1 (no > chan

Re: GSSAPI auth stopped working after upgrade

2011-12-07 Thread Victor Sudakov
Daniel Shahaf wrote: > > > > > > > > > > I have upgraded the svn client from subversion-1.6.17 to > > > > > subversion-1.7.2 on FreeBSD 7.4 and GSSAPI authentication stopped > > > > > working. svn does not even try to get a Kerberos ticket and tries to > > > > > > > > At least, how do I enable au

Re: GSSAPI auth stopped working after upgrade

2011-12-07 Thread Daniel Shahaf
Victor Sudakov wrote on Wed, Dec 07, 2011 at 15:07:54 +0700: > Daniel Shahaf wrote: > > > > > > > > I have upgraded the svn client from subversion-1.6.17 to > > > > subversion-1.7.2 on FreeBSD 7.4 and GSSAPI authentication stopped > > > > working. svn does not even try to get a Kerberos ticket and

Re: GSSAPI auth stopped working after upgrade

2011-12-07 Thread Victor Sudakov
Daniel Shahaf wrote: > > > > > > I have upgraded the svn client from subversion-1.6.17 to > > > subversion-1.7.2 on FreeBSD 7.4 and GSSAPI authentication stopped > > > working. svn does not even try to get a Kerberos ticket and tries to > > > > At least, how do I enable authentication debug in th

Re: GSSAPI auth stopped working after upgrade

2011-12-06 Thread Daniel Shahaf
Victor Sudakov wrote on Wed, Dec 07, 2011 at 12:54:39 +0700: > Victor Sudakov wrote: > > > > I have upgraded the svn client from subversion-1.6.17 to > > subversion-1.7.2 on FreeBSD 7.4 and GSSAPI authentication stopped > > working. svn does not even try to get a Kerberos ticket and tries to > >

Re: GSSAPI auth stopped working after upgrade

2011-12-06 Thread Victor Sudakov
Victor Sudakov wrote: > > I have upgraded the svn client from subversion-1.6.17 to > subversion-1.7.2 on FreeBSD 7.4 and GSSAPI authentication stopped > working. svn does not even try to get a Kerberos ticket and tries to At least, how do I enable authentication debug in the svn client? -- Vict

GSSAPI auth stopped working after upgrade

2011-12-06 Thread Victor Sudakov
Colleagues, I have upgraded the svn client from subversion-1.6.17 to subversion-1.7.2 on FreeBSD 7.4 and GSSAPI authentication stopped working. svn does not even try to get a Kerberos ticket and tries to use DIGEST-MD5 at once. The server is still subversion-1.6.16_1 (no changes there). What has