Subversion error E170001: Authentication required for <https://node:443>

TeamCity Professional 8.1.3 on Windows Server 2008 R2

I am attempting to configure my first TeamCity server and have gotten stuck trying to get it to connect with our subversion repository.

When I test my VCS configuration, I get the following error:

Test Connection

Connection failed!

Test connection failed in Test :: First_One.  svn: E170001 Authentication required for '<https://mysvnserver:443>'

When logged into the TeamCity server, I am able to use the svn client as shown (although it is slow to respond):

----------------

C:\> svn ls https://mysvnserver/svn/XXX_260

branches/

tags/

trunk/

----------------

My TeamCity VCS settinigs are:

Type of VCS: Subversion

VCS root name: XXX_260

VCS root ID: Test_Xxx260

URL: https://mysvnserver/svn/XXX_260

Username: DOMAINX\MYUSERNAME

Password: <mypassword>

Default config directory: [x] Use default config directory

Configuration directory: C:\Users\MYUSERNAME\AppData\Roaming\Subversion

Externals support: [x] Full support

SSH Settinigs:

  Private key file path: <blank>

  Private key file password: <blank>

  SSH Port: <blank>

We use VisualSVN for our repository with NTLM authentication.

In the security log on the VisualSVN server I see the following entry:

Event 4625 Audit failure

A account failed to log in.

Null SID

Logon Type 3

Unknown username or password

Status 0xc000006d

Substatus 0xc000006a

logon process NtlmSsp

Auth Package NTLM

This repeats several times and then starts repeating every 60 seconds which is the "changes checking interval" configured for the VCS.

Furthermore, my account gets locked out, so I know I have the correct username.  I have reentered the password several times just to make sure it is correct.

Some of the things I have tried:

I have the TeamCity server service running under my Active Direct account (DOMAINX\MYUSERNAME)

I added my AD account to the [Local Security Policy -> Local Policies -> User Rights Assignments -> Access the computer from the network] on the Subversion server

Set system-wide environment variable TEAMCITY_SERVER_OPTS=-Dsvnkit.http.methods=NTLM,Negotiate,Digest,Basic

(note the leading dash in the environment variable, I hope that is right).

Any suggestions?

Thanks.

3 comments
Comment actions Permalink

Following is a sanitized log using the org.tmatesoft.svn.cli.SVN command line class.  I specify the username and password on the command line as I expect this is what the Teamcity server could do when invoking svnkit.

C:\Users\MYUSERNAME>java -cp "C:\TeamCity\buildAgent\plugins\svnAgent\svnkit\svnkit-cli-1.8.4.jar;C:\TeamCity\buildAgent\plugins\svnAgent\svnkit\svnkit-1.8.4.jar;C:\TeamCity\buildAgent\plugins\svnAgent\svnkit\sequence-library-1.0.2.jar;C:\TeamCity\buildAgent\plugins\svnAgent\svnkit\sqljet-1.1.10.jar" -Djava.util.logging.config.file=C:\Users\MYUSERNAME\logging.properties org.tmatesoft.svn.cli.SVN ls https://mysvnserver/svn/XXX_260
--username MYDOMAIN\MYUSERNAME --password My_Pa$$word
Jul 7, 2014 4:29:38 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: WC: JNA present/enabled: false/true
Jul 7, 2014 4:29:39 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: NETWORK: Host set on an SSL socket
Jul 7, 2014 4:29:39 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: NETWORK: SSL protocols explicitly enabled: [TLSv1, SSLv3]
Jul 7, 2014 4:29:39 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:39 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Error validating server certificate for 'https://mysvnserver:443':
- The certificate is not issued by a trusted authority. Use the
   fingerprint to validate the certificate manually!
- The certificate hostname does not match.
Certificate information:
- Subject: L=Someplace, ST=XX, C=US, OU=XXXX, O=MYCOMPANY, CN=MYSVNSERVERA.MYDOMAIN.DCC.CCN
- Valid: from Fri Dec 02 11:04:16 PST 2011 until Mon Nov 29 11:04:16 PST 2021
- Issuer: L=Someplace, ST=XX, C=US, OU=XXXX, O=MYCOMPANY, CN=MYSVNSERVERA.MYDOMAIN.DCC.CCN
- Fingerprint: ff:ff:ff:ff:f3:72:ee:6a:6b:76:db:72:cf:ff:cf:58:57:8c:ff:ff
(R)eject, accept (t)emporarily or accept (p)ermanently? t
Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: SENT
OPTIONS /svn/XXX_260 HTTP/1.1
Host: mysvnserver
User-Agent: SVN/1.8.1 SVNKit/1.8.4 (http://svnkit.com/) r10218_v20140302_1242
Keep-Alive:
Connection: TE, Keep-Alive
TE: trailers
Content-Length: 0
Accept-Encoding: gzip
Content-Type: text/xml; charset="utf-8"
DAV: http://subversion.tigris.org/xmlns/dav/svn/depth
DAV: http://subversion.tigris.org/xmlns/dav/svn/mergeinfo
DAV: http://subversion.tigris.org/xmlns/dav/svn/log-revprops


Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: READ
HTTP/1.1 401 Authorization Required
Date: Mon, 07 Jul 2014 23:29:44 GMT
Server: Apache
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
Content-Length: 401
Keep-Alive: timeout=5, max=2000
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1


Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: NEGOTIATE: supported OID: 1.3.6.1.5.5.2
Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: NEGOTIATE: supported OID: 1.2.840.113554.1.2.2
Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: NEGOTIATE: needsLogin
Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: NEGOTIATE: initialize subject
Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: SENT
OPTIONS /svn/XXX_260 HTTP/1.1
Host: mysvnserver
User-Agent: SVN/1.8.1 SVNKit/1.8.4 (http://svnkit.com/) r10218_v20140302_1242
Keep-Alive:
Connection: TE, Keep-Alive
TE: trailers
Authorization: NTLM TlRMTVNTUAABAAAABlIXXXMAAwAoAAAACAAIACAAAAJJVE9TREVWMkRHTw==
Content-Length: 0
Accept-Encoding: gzip
Content-Type: text/xml; charset="utf-8"
DAV: http://subversion.tigris.org/xmlns/dav/svn/depth
DAV: http://subversion.tigris.org/xmlns/dav/svn/mergeinfo
DAV: http://subversion.tigris.org/xmlns/dav/svn/log-revprops


Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: READ
HTTP/1.1 401 Authorization Required
Date: Mon, 07 Jul 2014 23:29:44 GMT
Server: Apache
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM TlRMTVNTUAACXXXXXWADADgAAAAGAoJJhkFmXh/JzqAAAAAAAAAAAHoAegA7AAAABgGxHQAAAA9ER08CAAYARABHAE8AAQAKAEQAUwBSAEMAQQAEABYAR
ABHAE8ALgBEAEMAQwAuAEMAQwBOAAMAIgBEAFMAUgBDAEEALgBEAEcATwAuAEQAQwBDAC4AQwBDAE4ABQAOAEQAQwBDAC4AQwBDAE4ABwAIAEA4OVU7ms8BAAAAAA==
Content-Length: 401
Keep-Alive: timeout=5, max=1999
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1


Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: NEGOTIATE: needsLogin
Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: NEGOTIATE: initialize subject
Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: SENT
OPTIONS /svn/XXX_260 HTTP/1.1
Host: mysvnserver
User-Agent: SVN/1.8.1 SVNKit/1.8.4 (http://svnkit.com/) r10218_v20140302_1242
Keep-Alive:
Connection: TE, Keep-Alive
TE: trailers
Authorization: NTLM TlRMTVNTUAADAAAAGAAYAFIAAAAAAAAAagAAAAMAAwBAAAAABwAHAEMAAAAIAAgASgAAAAAAAABqAAAABlIAAERHT0JBSDI3MjFEVE9TREVWMkvorP3WK8Da
i05gFFnf9prxRCmUc408IQ==
Content-Length: 0
Accept-Encoding: gzip
Content-Type: text/xml; charset="utf-8"
DAV: http://subversion.tigris.org/xmlns/dav/svn/depth
DAV: http://subversion.tigris.org/xmlns/dav/svn/mergeinfo
DAV: http://subversion.tigris.org/xmlns/dav/svn/log-revprops


Jul 7, 2014 4:29:43 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:44 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: READ
HTTP/1.1 401 Authorization Required
Date: Mon, 07 Jul 2014 23:29:44 GMT
Server: Apache
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
Content-Length: 401
Keep-Alive: timeout=5, max=1998
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1


Jul 7, 2014 4:29:44 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: NEGOTIATE: needsLogin
Jul 7, 2014 4:29:44 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: NEGOTIATE: initialize subject
Authentication realm: <https://mysvnserver:443>
Username [MYDOMAIN\MYUSERNAME]:
Password for 'MYDOMAIN\MYUSERNAME':
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: Keep-Alive timeout detected
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: NETWORK: Host set on an SSL socket
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: NETWORK: SSL protocols explicitly enabled: [TLSv1, SSLv3]
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: SENT
OPTIONS /svn/XXX_260 HTTP/1.1
Host: mysvnserver
User-Agent: SVN/1.8.1 SVNKit/1.8.4 (http://svnkit.com/) r10218_v20140302_1242
Keep-Alive:
Connection: TE, Keep-Alive
TE: trailers
Content-Length: 0
Accept-Encoding: gzip
Content-Type: text/xml; charset="utf-8"
DAV: http://subversion.tigris.org/xmlns/dav/svn/depth
DAV: http://subversion.tigris.org/xmlns/dav/svn/mergeinfo
DAV: http://subversion.tigris.org/xmlns/dav/svn/log-revprops


Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: READ
HTTP/1.1 401 Authorization Required
Date: Mon, 07 Jul 2014 23:29:58 GMT
Server: Apache
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
Content-Length: 401
Keep-Alive: timeout=5, max=2000
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1


Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: NEGOTIATE: needsLogin
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: NEGOTIATE: initialize subject
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: SENT
OPTIONS /svn/XXX_260 HTTP/1.1
Host: mysvnserver
User-Agent: SVN/1.8.1 SVNKit/1.8.4 (http://svnkit.com/) r10218_v20140302_1242
Keep-Alive:
Connection: TE, Keep-Alive
TE: trailers
Authorization: NTLM TlRMTVNTUAABAAAABlIAAAMAAwAoAAAACAAIACAAAABEVE9TREVWMkPITw==
Content-Length: 0
Accept-Encoding: gzip
Content-Type: text/xml; charset="utf-8"
DAV: http://subversion.tigris.org/xmlns/dav/svn/depth
DAV: http://subversion.tigris.org/xmlns/dav/svn/mergeinfo
DAV: http://subversion.tigris.org/xmlns/dav/svn/log-revprops


Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: READ
HTTP/1.1 401 Authorization Required
Date: Mon, 07 Jul 2014 23:29:58 GMT
Server: Apache
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM TlRMTVNTUAACAAAAAwADADgAAAAGAoECyr+Qjy/97H0AAAAAAAAAAHoAegA7AAAABgGxHQAAAA9ER08CAAYARABHAE8AAQAKAEQAUwBSAEMAQQAEABYAR
ABHAE8ALgBEAEMAQwIOPEMAQwBOAAJBIgBEAFMAUgBDAEEALgBEAEcATwAuAEQAQwBDAC4AQwBDAE4ABQAOAEQAQwBDAC4AQwBDAE4ABwAIAKC2FV47ms8BAAAAAA==
Content-Length: 401
Keep-Alive: timeout=5, max=1999
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1


Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: NEGOTIATE: needsLogin
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: NEGOTIATE: initialize subject
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: SENT
OPTIONS /svn/XXX_260 HTTP/1.1
Host: mysvnserver
User-Agent: SVN/1.8.1 SVNKit/1.8.4 (http://svnkit.com/) r10218_v20140302_1242
Keep-Alive:
Connection: TE, Keep-Alive
TE: trailers
Authorization: NTLM TlRMTVNTUAADAAAAGAAYAFIAAAAAAAAAagAAAAMAAwBAAAAABwAHAEMAAAAIAAgASgAAAAAAAABqAAAABlIAAERHT0JBSDI3MjFEVE9TREVWMjKioSLULNN7
1SPY3Lzw47+2G8Z+913/PQ==
Content-Length: 0
Accept-Encoding: gzip
Content-Type: text/xml; charset="utf-8"
DAV: http://subversion.tigris.org/xmlns/dav/svn/depth
DAV: http://subversion.tigris.org/xmlns/dav/svn/mergeinfo
DAV: http://subversion.tigris.org/xmlns/dav/svn/log-revprops


Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: DEFAULT: socket output stream requested...
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINEST: READ
HTTP/1.1 401 Authorization Required
Date: Mon, 07 Jul 2014 23:29:58 GMT
Server: Apache
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
Content-Length: 401
Keep-Alive: timeout=5, max=1998
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1


Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: NEGOTIATE: needsLogin
Jul 7, 2014 4:29:58 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: NETWORK: NEGOTIATE: initialize subject
Authentication realm: <https://mysvnserver:443>
Username [MYDOMAIN\MYUSERNAME]: <I enter Ctrl/C here>
Jul 7, 2014 4:30:00 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
FINE: WC: authentication cancelled
Jul 7, 2014 4:30:00 PM org.tmatesoft.svn.core.internal.util.DefaultSVNDebugLogger log
SEVERE: CLI: svn: E200015: authentication cancelled
org.tmatesoft.svn.core.SVNException: svn: E200015: authentication cancelled
        at org.tmatesoft.svn.cli.AbstractSVNCommandEnvironment.handleWarning(AbstractSVNCommandEnvironment.java:401)
        at org.tmatesoft.svn.cli.svn.SVNListCommand.run(SVNListCommand.java:95)
        at org.tmatesoft.svn.cli.AbstractSVNCommandEnvironment.run(AbstractSVNCommandEnvironment.java:142)
        at org.tmatesoft.svn.cli.AbstractSVNLauncher.run(AbstractSVNLauncher.java:79)
        at org.tmatesoft.svn.cli.svn.SVN.main(SVN.java:26)
        at org.tmatesoft.svn.cli.SVN.main(SVN.java:22)
Caused by: org.tmatesoft.svn.core.SVNCancelException: svn: E200015: authentication cancelled
        at org.tmatesoft.svn.core.internal.wc.SVNErrorManager.cancel(SVNErrorManager.java:37)
        at org.tmatesoft.svn.core.internal.wc.SVNErrorManager.cancel(SVNErrorManager.java:32)
        at org.tmatesoft.svn.core.internal.wc.DefaultSVNAuthenticationManager.getNextAuthentication(DefaultSVNAuthenticationManager.java:215
)
        at org.tmatesoft.svn.core.internal.io.dav.http.HTTPConnection.request(HTTPConnection.java:685)
        at org.tmatesoft.svn.core.internal.io.dav.http.HTTPConnection.request(HTTPConnection.java:371)
        at org.tmatesoft.svn.core.internal.io.dav.http.HTTPConnection.request(HTTPConnection.java:359)
        at org.tmatesoft.svn.core.internal.io.dav.DAVConnection.performHttpRequest(DAVConnection.java:710)
        at org.tmatesoft.svn.core.internal.io.dav.DAVConnection.exchangeCapabilities(DAVConnection.java:627)
        at org.tmatesoft.svn.core.internal.io.dav.DAVConnection.open(DAVConnection.java:102)
        at org.tmatesoft.svn.core.internal.io.dav.DAVRepository.openConnection(DAVRepository.java:1032)
        at org.tmatesoft.svn.core.internal.io.dav.DAVRepository.getLatestRevision(DAVRepository.java:175)
        at org.tmatesoft.svn.core.internal.wc2.ng.SvnNgRepositoryAccess.getRevisionNumber(SvnNgRepositoryAccess.java:118)
        at org.tmatesoft.svn.core.internal.wc2.SvnRepositoryAccess.getLocations(SvnRepositoryAccess.java:182)
        at org.tmatesoft.svn.core.internal.wc2.ng.SvnNgRepositoryAccess.createRepositoryFor(SvnNgRepositoryAccess.java:45)
        at org.tmatesoft.svn.core.internal.wc2.remote.SvnRemoteList.run(SvnRemoteList.java:32)
        at org.tmatesoft.svn.core.internal.wc2.remote.SvnRemoteList.run(SvnRemoteList.java:24)
        at org.tmatesoft.svn.core.internal.wc2.SvnOperationRunner.run(SvnOperationRunner.java:20)
        at org.tmatesoft.svn.core.wc2.SvnOperationFactory.run(SvnOperationFactory.java:1149)
        at org.tmatesoft.svn.core.wc2.SvnOperation.run(SvnOperation.java:294)
        at org.tmatesoft.svn.core.wc.SVNLogClient.doList(SVNLogClient.java:1309)
        at org.tmatesoft.svn.cli.svn.SVNListCommand.run(SVNListCommand.java:92)
        ... 4 more
svn: E200015: authentication cancelled

0
Comment actions Permalink

I believe the problem is caused because our domain has disabled NTLM in favor of straight Kerberos.  We changed the VisualSVN server to accept basic authentication (over https) which allowed the following command to work:

C:\Users\MYUSERNAME>java -cp "C:\TeamCity\buildAgent\plugins\svnAgent\svnkit\jna-3.5.2.jar;C:\TeamCity\buildAgent\plugins\svnAgent\svnkit\svnkit-cli-1.8.4.jar;C:\TeamCity\buildAgent\plugins\svnAgent\svnkit\svnkit-1.8.4.jar;C:\TeamCity\buildAgent\plugins\svnAgent\svnkit\sequence-library-1.0.2.jar;C:\TeamCity\buildAgent\plugins\svnAgent\svnkit\sqljet-1.1.10.jar" -Djava.util.logging.config.file=C:\Users\MYUSERNAME\logging.properties -Dsvnkit.http.methods=Basic -Dsvnkit.http.sslProtocols=SSLv3 org.tmatesoft.svn.cli.SVN ls https://mysvnserver/svn/XXX_260 --username MYDOMAIN\MYUSERNAME --password _My_Password_

The TeamCity server still wasn't able to connect though.  Basic is the last protol support in system-wid environment variable TEAMCITY_SERVER_OPTS=-Dsvnkit.http.methods=NTLM,Negotiate,Digest,Basic.  I changed it to TEAMCITY_SERVER_OPTS=-Dsvnkit.http.methods=Basic and then the VCS test passed too.

It wasn't worth my time to figure out what was misconfigured on the Kerberos side of things.  I don't know if I need to configure an SPN and set java properties such as

java.security.krb5.realm=YOURDOMAIN.COM
java.security.krb5.kdc=kdc.yourdomain.com
sun.security.krb5.debug=false

Message was edited by: Brett JetBrains Hunsaker

0
Comment actions Permalink

Hi,

Sorry for delay. I've created an issue http://youtrack.jetbrains.com/issue/TW-37220. Please watch and vote.

0

Please sign in to leave a comment.