Use SVNKit with Kerberos: Hudson, IntelliJ

View: New views
5 Messages — Rating Filter:   Alert me  

Use SVNKit with Kerberos: Hudson, IntelliJ

by Clifton :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi,

I'm an Hudson and IntelliJ user and our company recently switched over to a svn server that uses Kerberos for authentication. I'm completely lost as I've heard SVNKit doesn't work with Kerberos but can somehow be configured. My biggest headache is getting my IDE running again. Idea uses SVNKit and when I try (from my Macbook Pro) pointing to the new server URL, ssh+svn://newserver Idea prompts for authentication. This is after I've already issued kinit from the cmd line. How can I configure SVNKit to use tunnels as mentioned here:
http://www.nabble.com/can-you-use-an-external-SSH-client-in-SVNKit-td22338661.html#a22338661
Is set in a config file? If so which config file? Where do I find more documentation? Is this listed somewhere in the svn redbook as a svn client config or is it an SVNKit config? I can browse the svn server from the cmd line but I cannot get my IDE to work. I disparately need help as I've already posted on the IDE community support page with no response.

Re: Use SVNKit with Kerberos: Hudson, IntelliJ

by Alexander Kitaev-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hello Cliff,

>ssh+svn://newserver Idea prompts for authentication. This is after I've
>already issued kinit from the cmd line. How can I configure SVNKit to

SVNkit uses Java SSH library to establish SSH connection by default, and
this library doesn't support Kerberos.

> already issued kinit from the cmd line. How can I configure SVNKit to use
> tunnels as mentioned here:
>
http://www.nabble.com/can-you-use-an-external-SSH-client-in-SVNKit-td22338661.html#a22338661
> Is set in a config file? If so which config file? Where do I find more
> documentation? Is this listed somewhere in the svn redbook as a svn client
> config or is it an SVNKit config? I can browse the svn server from the cmd
> line but I cannot get my IDE to work. I disparately need help as I've
> already posted on the IDE community support page with no response.

You may make SVNKit use external program to establish tunnel. First, you
should put tunnel definition into Subversion configuration file (located
at ~/.subversion/config) into [tunnels] section:

[tunnels]

kssh=/full/path/to/ssh -all -options -needed

Tunnels is standard Subversion featured documented in Subversion Book
and in the configuration file itself. The only difference with SVNKit is
that by default SVNKit doesn't look for tunnel for "ssh" and uses java
SSH library instead. So this is why I named tunnel "kssh".

Then, as soon as tunnel is defined, you should use URLs of the following
form to access repository:

svn+kssh://hostname/repos/path

SVNKit will parse out "kssh" and then will look for a tunnel definition.

Please let me know if that works for you.

Alexander Kitaev,
TMate Software,
http://svnkit.com/ - Java [Sub]Versioning Library!
http://sqljet.com/ - Java SQLite Library!

Clifton wrote:

> Hi,
>
> I'm an Hudson and IntelliJ user and our company recently switched over to a
> svn server that uses Kerberos for authentication. I'm completely lost as
> I've heard SVNKit doesn't work with Kerberos but can somehow be configured.
> My biggest headache is getting my IDE running again. Idea uses SVNKit and
> when I try (from my Macbook Pro) pointing to the new server URL,
> ssh+svn://newserver Idea prompts for authentication. This is after I've
> already issued kinit from the cmd line. How can I configure SVNKit to use
> tunnels as mentioned here:
> http://www.nabble.com/can-you-use-an-external-SSH-client-in-SVNKit-td22338661.html#a22338661
> Is set in a config file? If so which config file? Where do I find more
> documentation? Is this listed somewhere in the svn redbook as a svn client
> config or is it an SVNKit config? I can browse the svn server from the cmd
> line but I cannot get my IDE to work. I disparately need help as I've
> already posted on the IDE community support page with no response.
>
> -----
> Cliff
> http://codeforfun.wordpress.com
> http://www.nabble.com/file/u156847/Cliff-in-the-lab.png 

---------------------------------------------------------------------
To unsubscribe, e-mail: svnkit-users-unsubscribe@...
For additional commands, e-mail: svnkit-users-help@...


Re: Use SVNKit with Kerberos: Hudson, IntelliJ

by Clifton :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi Alex,

I tried using an ssh tunnel with Hudson but I get an error: org.tmatesoft.svn.core.SVNException: svn: Cannot find tunnel specification for 'kssh'

I recall there was an API level flag that Hudson needs to set in order to enable tunnels. Could this be the case here? Could you explain which flag it is? Does anyone have a build of Hudson with this flag enabled?

Alexander Kitaev-3 wrote:
Hello Cliff,

>ssh+svn://newserver Idea prompts for authentication. This is after I've
>already issued kinit from the cmd line. How can I configure SVNKit to

SVNkit uses Java SSH library to establish SSH connection by default, and
this library doesn't support Kerberos.

> already issued kinit from the cmd line. How can I configure SVNKit to use
> tunnels as mentioned here:
>
http://www.nabble.com/can-you-use-an-external-SSH-client-in-SVNKit-td22338661.html#a22338661
> Is set in a config file? If so which config file? Where do I find more
> documentation? Is this listed somewhere in the svn redbook as a svn client
> config or is it an SVNKit config? I can browse the svn server from the cmd
> line but I cannot get my IDE to work. I disparately need help as I've
> already posted on the IDE community support page with no response.

You may make SVNKit use external program to establish tunnel. First, you
should put tunnel definition into Subversion configuration file (located
at ~/.subversion/config) into [tunnels] section:

[tunnels]

kssh=/full/path/to/ssh -all -options -needed

Tunnels is standard Subversion featured documented in Subversion Book
and in the configuration file itself. The only difference with SVNKit is
that by default SVNKit doesn't look for tunnel for "ssh" and uses java
SSH library instead. So this is why I named tunnel "kssh".

Then, as soon as tunnel is defined, you should use URLs of the following
form to access repository:

svn+kssh://hostname/repos/path

SVNKit will parse out "kssh" and then will look for a tunnel definition.

Please let me know if that works for you.

Alexander Kitaev,
TMate Software,
http://svnkit.com/ - Java [Sub]Versioning Library!
http://sqljet.com/ - Java SQLite Library!

Clifton wrote:
> Hi,
>
> I'm an Hudson and IntelliJ user and our company recently switched over to a
> svn server that uses Kerberos for authentication. I'm completely lost as
> I've heard SVNKit doesn't work with Kerberos but can somehow be configured.
> My biggest headache is getting my IDE running again. Idea uses SVNKit and
> when I try (from my Macbook Pro) pointing to the new server URL,
> ssh+svn://newserver Idea prompts for authentication. This is after I've
> already issued kinit from the cmd line. How can I configure SVNKit to use
> tunnels as mentioned here:
> http://www.nabble.com/can-you-use-an-external-SSH-client-in-SVNKit-td22338661.html#a22338661
> Is set in a config file? If so which config file? Where do I find more
> documentation? Is this listed somewhere in the svn redbook as a svn client
> config or is it an SVNKit config? I can browse the svn server from the cmd
> line but I cannot get my IDE to work. I disparately need help as I've
> already posted on the IDE community support page with no response.
>
> -----
> Cliff
> http://codeforfun.wordpress.com
> http://www.nabble.com/file/u156847/Cliff-in-the-lab.png 

---------------------------------------------------------------------
To unsubscribe, e-mail: svnkit-users-unsubscribe@svnkit.com
For additional commands, e-mail: svnkit-users-help@svnkit.com

Re: Use SVNKit with Kerberos: Hudson, IntelliJ

by Alexander Kitaev-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hello Clifton,

Tunnel definition in Subversion configuration file should be used by
SVNKit unless Hudson replaces ISVNOptions implementation with custom
one, or specifies custom configuration directory.

Also, in case Hudson is ran on behalf of the certain user, then
configuration will be read from that user's home directory.

Tunnel definition should look like (in the 'config' file):

[tunnels]
kssh = /usr/bin/kssh

Make sure you're not using environment variables in definition - so far
SVNKit couldn't expand them.

Also, I'd recommend you to set up tunnel and make sure it works with
SVNKit command line client, so you'll be sure that problem is
Hudson-specific.

Alexander Kitaev,
TMate Software,
http://svnkit.com/ - Java [Sub]Versioning Library!
http://sqljet.com/ - Java SQLite Library!

Clifton wrote:

> Hi Alex,
>
> I tried using an ssh tunnel with Hudson but I get an error:
> org.tmatesoft.svn.core.SVNException: svn: Cannot find tunnel specification
> for 'kssh'
>
> I recall there was an API level flag that Hudson needs to set in order to
> enable tunnels. Could this be the case here? Could you explain which flag it
> is? Does anyone have a build of Hudson with this flag enabled?
>
>
> Alexander Kitaev-3 wrote:
>> Hello Cliff,
>>
>>> ssh+svn://newserver Idea prompts for authentication. This is after I've
>>> already issued kinit from the cmd line. How can I configure SVNKit to
>> SVNkit uses Java SSH library to establish SSH connection by default, and
>> this library doesn't support Kerberos.
>>
>>> already issued kinit from the cmd line. How can I configure SVNKit to use
>>> tunnels as mentioned here:
>>>
>> http://www.nabble.com/can-you-use-an-external-SSH-client-in-SVNKit-td22338661.html#a22338661
>>> Is set in a config file? If so which config file? Where do I find more
>>> documentation? Is this listed somewhere in the svn redbook as a svn
>>> client
>>> config or is it an SVNKit config? I can browse the svn server from the
>>> cmd
>>> line but I cannot get my IDE to work. I disparately need help as I've
>>> already posted on the IDE community support page with no response.
>> You may make SVNKit use external program to establish tunnel. First, you
>> should put tunnel definition into Subversion configuration file (located
>> at ~/.subversion/config) into [tunnels] section:
>>
>> [tunnels]
>>
>> kssh=/full/path/to/ssh -all -options -needed
>>
>> Tunnels is standard Subversion featured documented in Subversion Book
>> and in the configuration file itself. The only difference with SVNKit is
>> that by default SVNKit doesn't look for tunnel for "ssh" and uses java
>> SSH library instead. So this is why I named tunnel "kssh".
>>
>> Then, as soon as tunnel is defined, you should use URLs of the following
>> form to access repository:
>>
>> svn+kssh://hostname/repos/path
>>
>> SVNKit will parse out "kssh" and then will look for a tunnel definition.
>>
>> Please let me know if that works for you.
>>
>> Alexander Kitaev,
>> TMate Software,
>> http://svnkit.com/ - Java [Sub]Versioning Library!
>> http://sqljet.com/ - Java SQLite Library!
>>
>> Clifton wrote:
>>> Hi,
>>>
>>> I'm an Hudson and IntelliJ user and our company recently switched over to
>>> a
>>> svn server that uses Kerberos for authentication. I'm completely lost as
>>> I've heard SVNKit doesn't work with Kerberos but can somehow be
>>> configured.
>>> My biggest headache is getting my IDE running again. Idea uses SVNKit and
>>> when I try (from my Macbook Pro) pointing to the new server URL,
>>> ssh+svn://newserver Idea prompts for authentication. This is after I've
>>> already issued kinit from the cmd line. How can I configure SVNKit to use
>>> tunnels as mentioned here:
>>> http://www.nabble.com/can-you-use-an-external-SSH-client-in-SVNKit-td22338661.html#a22338661
>>> Is set in a config file? If so which config file? Where do I find more
>>> documentation? Is this listed somewhere in the svn redbook as a svn
>>> client
>>> config or is it an SVNKit config? I can browse the svn server from the
>>> cmd
>>> line but I cannot get my IDE to work. I disparately need help as I've
>>> already posted on the IDE community support page with no response.
>>>
>>> -----
>>> Cliff
>>> http://codeforfun.wordpress.com
>>> http://www.nabble.com/file/u156847/Cliff-in-the-lab.png 
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: svnkit-users-unsubscribe@...
>> For additional commands, e-mail: svnkit-users-help@...
>>
>>
>>
>
>
> -----
> Cliff
> http://codeforfun.wordpress.com
> http://www.nabble.com/file/u156847/Cliff-in-the-lab.png 

---------------------------------------------------------------------
To unsubscribe, e-mail: svnkit-users-unsubscribe@...
For additional commands, e-mail: svnkit-users-help@...


Re: Use SVNKit with Kerberos: Hudson, IntelliJ

by Clifton :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Thank you Alex,

I finally resolved my problem as the latest version of Hudson actually does recognize the tunnel. It just shows an error stating incorrectly that it doesn't. Brute force works. Thank you for responding so quickly.

Alexander Kitaev-3 wrote:
Hello Clifton,

Tunnel definition in Subversion configuration file should be used by
SVNKit unless Hudson replaces ISVNOptions implementation with custom
one, or specifies custom configuration directory.

Also, in case Hudson is ran on behalf of the certain user, then
configuration will be read from that user's home directory.

Tunnel definition should look like (in the 'config' file):

[tunnels]
kssh = /usr/bin/kssh

Make sure you're not using environment variables in definition - so far
SVNKit couldn't expand them.

Also, I'd recommend you to set up tunnel and make sure it works with
SVNKit command line client, so you'll be sure that problem is
Hudson-specific.

Alexander Kitaev,
TMate Software,
http://svnkit.com/ - Java [Sub]Versioning Library!
http://sqljet.com/ - Java SQLite Library!

Clifton wrote:
> Hi Alex,
>
> I tried using an ssh tunnel with Hudson but I get an error:
> org.tmatesoft.svn.core.SVNException: svn: Cannot find tunnel specification
> for 'kssh'
>
> I recall there was an API level flag that Hudson needs to set in order to
> enable tunnels. Could this be the case here? Could you explain which flag it
> is? Does anyone have a build of Hudson with this flag enabled?
>
>
> Alexander Kitaev-3 wrote:
>> Hello Cliff,
>>
>>> ssh+svn://newserver Idea prompts for authentication. This is after I've
>>> already issued kinit from the cmd line. How can I configure SVNKit to
>> SVNkit uses Java SSH library to establish SSH connection by default, and
>> this library doesn't support Kerberos.
>>
>>> already issued kinit from the cmd line. How can I configure SVNKit to use
>>> tunnels as mentioned here:
>>>
>> http://www.nabble.com/can-you-use-an-external-SSH-client-in-SVNKit-td22338661.html#a22338661
>>> Is set in a config file? If so which config file? Where do I find more
>>> documentation? Is this listed somewhere in the svn redbook as a svn
>>> client
>>> config or is it an SVNKit config? I can browse the svn server from the
>>> cmd
>>> line but I cannot get my IDE to work. I disparately need help as I've
>>> already posted on the IDE community support page with no response.
>> You may make SVNKit use external program to establish tunnel. First, you
>> should put tunnel definition into Subversion configuration file (located
>> at ~/.subversion/config) into [tunnels] section:
>>
>> [tunnels]
>>
>> kssh=/full/path/to/ssh -all -options -needed
>>
>> Tunnels is standard Subversion featured documented in Subversion Book
>> and in the configuration file itself. The only difference with SVNKit is
>> that by default SVNKit doesn't look for tunnel for "ssh" and uses java
>> SSH library instead. So this is why I named tunnel "kssh".
>>
>> Then, as soon as tunnel is defined, you should use URLs of the following
>> form to access repository:
>>
>> svn+kssh://hostname/repos/path
>>
>> SVNKit will parse out "kssh" and then will look for a tunnel definition.
>>
>> Please let me know if that works for you.
>>
>> Alexander Kitaev,
>> TMate Software,
>> http://svnkit.com/ - Java [Sub]Versioning Library!
>> http://sqljet.com/ - Java SQLite Library!
>>
>> Clifton wrote:
>>> Hi,
>>>
>>> I'm an Hudson and IntelliJ user and our company recently switched over to
>>> a
>>> svn server that uses Kerberos for authentication. I'm completely lost as
>>> I've heard SVNKit doesn't work with Kerberos but can somehow be
>>> configured.
>>> My biggest headache is getting my IDE running again. Idea uses SVNKit and
>>> when I try (from my Macbook Pro) pointing to the new server URL,
>>> ssh+svn://newserver Idea prompts for authentication. This is after I've
>>> already issued kinit from the cmd line. How can I configure SVNKit to use
>>> tunnels as mentioned here:
>>> http://www.nabble.com/can-you-use-an-external-SSH-client-in-SVNKit-td22338661.html#a22338661
>>> Is set in a config file? If so which config file? Where do I find more
>>> documentation? Is this listed somewhere in the svn redbook as a svn
>>> client
>>> config or is it an SVNKit config? I can browse the svn server from the
>>> cmd
>>> line but I cannot get my IDE to work. I disparately need help as I've
>>> already posted on the IDE community support page with no response.
>>>
>>> -----
>>> Cliff
>>> http://codeforfun.wordpress.com
>>> http://www.nabble.com/file/u156847/Cliff-in-the-lab.png 
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: svnkit-users-unsubscribe@svnkit.com
>> For additional commands, e-mail: svnkit-users-help@svnkit.com
>>
>>
>>
>
>
> -----
> Cliff
> http://codeforfun.wordpress.com
> http://www.nabble.com/file/u156847/Cliff-in-the-lab.png 

---------------------------------------------------------------------
To unsubscribe, e-mail: svnkit-users-unsubscribe@svnkit.com
For additional commands, e-mail: svnkit-users-help@svnkit.com