none
sspi outside domain

    Question

  • firstly im aware this is an sql forum, but having seen past posts on this forum about sspi here, there seem to be some real experts on sspi here, so maybe you could help me out:

    i have now got sspi to mostly work with subversion, at least for machines that are part of the internal domain.

    now if a user tries to authenticate from a machine outside the firewall and outside the domain, then the domain user and password fail: they get access forbidden prompt (401).

    1) could you confirm that the beta sspi module (for apache) allows for authentication from outside the domain? i.e. the user account the user is logged on with does not matter, as long as the typed user and password are part of the domain?

    2) could this be a firewall issue? i have opened only port 443 (https), but is anything else needed?

    3) any ideas how i could troubleshoot this issue: i know that if i turn off sspi authentication then the outside user are able to access subversion, but how could i make authentication work with sspi from the Internet?

    any help very much needed and appreciated.

    Thursday, May 19, 2011 4:00 PM

Answers

  • Users of this forum are probably good with SSPI in relation to SQL Server and maybe even IIS, however they may not know how to use it with Subversion and Apache.  I would recommend that you post this question on a Subversion (http://www.svnforum.org/) or Apache (http://www.apacheforums.com/) forum as you'll probably get an answer quicker than you will on these forums :-)
    Jeff Wharton MSysDev (C.Sturt), MDbDsgnMgt (C.Sturt) MCT, MCPD, MCITP, MCDBA, MCSD, MCAD
    Friday, May 20, 2011 1:50 AM