[prev in list] [next in list] [prev in thread] [next in thread] 

List:       subversion-issues
Subject:    =?UTF-8?B?W0lzc3VlIDIzOTFdIE5ldyAtIENsaWVudCBjZXJ0aWZpY2F0ZSBhdQ==?=
From:       seichter () tigris ! org
Date:       2005-08-30 12:42:21
Message-ID: 20050830124221.21230.qmail () tigris ! org
[Download RAW message or body]

http://subversion.tigris.org/issues/show_bug.cgi?id=2391
                 Issue #|2391
                 Summary|Client certificate authentication fails when using loc
                        |alized SVN client texts
               Component|subversion
                 Version|1.2.x
                Platform|All
                     URL|http://subversion.tigris.org/servlets/ReadMsg?list=use
                        |rs&msgNo=37509
              OS/Version|All
                  Status|NEW
       Status whiteboard|
                Keywords|
              Resolution|
              Issue type|DEFECT
                Priority|P2
            Subcomponent|translations
             Assigned to|issues@subversion
             Reported by|seichter






------- Additional comments from seichter@tigris.org Tue Aug 30 05:42:21 -0700 2005 -------
Scenario: SVN 1.2.3 client (Windows XP, "German" locale) tries to
access SVN 1.2.3 Server (Apache 2.0.54, Linux). Authentication is
based on client certificates only, no name/password authentication
is allowed. "SSLUserName SSL_CLIENT_S_DN_CN" is used to extract the
client's user name, "AuthzSVNAccessFile" defines access to SVN
repositories.

Observation 1: when the SVN client uses localized messages from
"share\locale\de", Apache returns "403 forbidden" for each attempt
to access the SVN repository. Apache logs shows no user name, which
I interpret as a problem when trying to extract certficiate data.

Observation 2: when the folder "share" is deleted or renamed, access
to the SVN repository is working without problems. Apache logs show
the user name as it is defined in the client certificate.

The issue was discussed in the SVN user mailing list (please see
http://subversion.tigris.org/servlets/ReadMsg?list=users&msgNo=37509
and the followups for Apache log excerpts etc.) and I was asked to
file a bug report.

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@subversion.tigris.org
For additional commands, e-mail: issues-help@subversion.tigris.org

[prev in list] [next in list] [prev in thread] [next in thread]