Issues with sasl auth for svn on CentOS 5.2
 

Hi All,

I am trying to use sasl auth DIGEST-MD5 rather plain text password file for my svn repository.

The issue I am running into is saslauthd does not think I have the DIGEST-MD5 and CRAM-MD5 mechanisms installed.

If anyone has any suggestions it would be greatly appreciated.

Below are my installed rpm's for cyrus-sasl
and what saslauthd think I have installed for mechanisms.

[root@myhost etc]# yum list installed | grep sasl
cyrus-sasl.x86_64 2.1.22-5.el5_4.3 installed
cyrus-sasl-devel.x86_64 2.1.22-5.el5_4.3 installed
cyrus-sasl-lib.x86_64 2.1.22-5.el5_4.3 installed
cyrus-sasl-md5.x86_64 2.1.22-5.el5_4.3 installed
cyrus-sasl-plain.x86_64 2.1.22-5.el5_4.3 installed

[root@myhost etc]# saslauthd -v
saslauthd 2.1.22
authentication mechanisms: getpwent kerberos5 pam rimap shadow ldap

centOS 5.2 has been unsupported for a few years now .
upgrade to the current and ONLY supported version in the 5 series
CentOS 5.6
or upgrade to CentOS 6.0

Thats for the reply.
I upgraded to CentOS 5.6 and I am still seeing the same issue. Any other thoughts?

well just HOW are you doing that ?
the FULL steps you are taking

and what svn repo?
how is it set up ?
what software are you using ?
WHY do you think that "saslauthd does not think I have the DIGEST-MD5 and CRAM-MD5 mechanisms installed."
is there an error massage some place ?


the full error would help

I don't think saslauthd thinks I have the DIGEST-MD5 mechanism because when I run the following command it does not show it in the list of mechanisms.


[root@myhost etc]# saslauthd -v
saslauthd 2.1.22
authentication mechanisms: getpwent kerberos5 pam rimap shadow ldap

Here is how I am setting it up.

Here is the method I am using.
http://svnbook.red-bean.com/en/1.5/s....svnserve.sasl

Here is my svnserve.conf file.

[general]
anon-access = none
auth-access = write
realm = myrealm
[sasl]
use-sasl = true
min-encryption = 128
max-encryption = 256


and here is my /usr/lib64/sasl2/svn.conf file

pwcheck_method: auxprop
auxprop_plugin: sasldb
sasldb_path: /svn/svn_sasldb
mech_list: DIGEST-MD5

$ saslpasswd2 -c -f /etc/my_sasldb -u myrealm username

svnserve version information with sasl support.

[root@myhost ~]# svnserve --version
svnserve, version 1.6.11 (r934486)
compiled Jun 8 2011, 16:22:13

Copyright (C) 2000-2009 CollabNet.
Subversion is open source software, see http://subversion.tigris.org/
This product includes software developed by CollabNet (http://www.Collab.Net/).

The following repository back-end (FS) modules are available:

* fs_base : Module for working with a Berkeley DB repository.
* fs_fs : Module for working with a plain file (FSFS) repository.

Cyrus SASL authentication is available.


I am stumped. It will not let me start saslauthd with DIGEST-MD5 mech.

[root@myhost ~]# saslauthd -a DIGEST-MD5
saslauthd[8261] :set_auth_mech : unknown authentication mechanism: DIGEST-MD5

Am I missing something here?

you are aware that those are mostly Microsoft Windows XP instructions


and that there is a svn server in the cent /RHEL repos
"yum search svn" will find it


in the bit you posted above the ONE missing thing i do not see is ANY reference to SELinux

you MUST have set some context on it
and you MUST have wrote some authentication rule for this
and there should be some "SELinuxTroubleShooter" warning or error message
( a gold star in the upper right of the gnome desktop )


this is for an older cent but mostly will be good
http://wiki.centos.org/HowTos/Subversion
mostly the same
http://www.if-not-true-then-false.co...-red-hat-rhel/

a pdf "Howto_istall_SVN_CentOS.pdf" from Stanford Univ.
http://micro.stanford.edu/mediawiki/...SVN_CentOS.pdf

These are instructions for UNIX/LINUX/and Cygwin on Windows; svn config files are svn config files I am using them as examples.

Also, I am aware that there is an svn server in the repos for centOS/RHEL as you can see from my very first post that I have installed these packages but I am having an issue with my installation (only with the mechanisms). And I have SElinux disabled. I am trying to use straight SASL2.