[Issue 1379] New - SVN credentials doesn't sseem to persists correctly

classic Classic list List threaded Threaded
10 messages Options
Reply | Threaded
Open this post in threaded view
|

[Issue 1379] New - SVN credentials doesn't sseem to persists correctly

jsbournival-2
https://hudson.dev.java.net/issues/show_bug.cgi?id=1379
                 Issue #|1379
                 Summary|SVN credentials doesn't sseem to persists correctly
               Component|hudson
                 Version|current
                Platform|PC
              OS/Version|Linux
                     URL|
                  Status|NEW
       Status whiteboard|
                Keywords|
              Resolution|
              Issue type|DEFECT
                Priority|P2
            Subcomponent|subversion
             Assigned to|issues@hudson
             Reported by|jsbournival






------- Additional comments from [hidden email] Fri Mar  7 14:18:32 +0000 2008 -------
We have a couple of projects for which we created Hudson jobs.  We are
configuring them to pick up source code in SVN, and enter appropriate
credentials (Hudson tells us it is saving them in its credential safe).  To make
sure everything's all right, we fire a build right away.  But then, the day
after, we have an email from hudson saying our build has failed:

------------------------------------------
started
ERROR: svn: Authorization failed
org.tmatesoft.svn.core.SVNAuthenticationException: svn: Authorization failed
        at
org.tmatesoft.svn.core.internal.wc.SVNErrorManager.error(SVNErrorManager.java:47)
        at org.tmatesoft.svn.core.internal.io.svn.SVNReader.parse(SVNReader.java:288)
        at
org.tmatesoft.svn.core.internal.io.svn.SVNConnection.read(SVNConnection.java:210)
        at
org.tmatesoft.svn.core.internal.io.svn.SVNConnection.authenticate(SVNConnection.java:93)
        at
org.tmatesoft.svn.core.internal.io.svn.SVNRepositoryImpl.authenticate(SVNRepositoryImpl.java:991)
        at
org.tmatesoft.svn.core.internal.io.svn.SVNRepositoryImpl.checkPath(SVNRepositoryImpl.java:216)
        at
hudson.scm.SubversionSCM$DescriptorImpl.checkRepositoryPath(SubversionSCM.java:1224)
        at hudson.scm.SubversionSCM.repositoryLocationsExist(SubversionSCM.java:1281)
        at hudson.scm.SubversionSCM.checkout(SubversionSCM.java:336)
        at hudson.scm.SubversionSCM.checkout(SubversionSCM.java:300)
        at hudson.model.AbstractProject.checkout(AbstractProject.java:558)
        at hudson.model.AbstractBuild$AbstractRunner.checkout(AbstractBuild.java:215)
        at hudson.model.AbstractBuild$AbstractRunner.run(AbstractBuild.java:181)
        at hudson.model.Run.run(Run.java:659)
        at hudson.model.Build.run(Build.java:101)
        at hudson.model.ResourceController.execute(ResourceController.java:70)
        at hudson.model.Executor.run(Executor.java:71)
Publishing Javadoc
Recording test results

So we have to re-enter the credential again each morning.

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

[Issue 1379] SVN credentials doesn't sseem to persists correctly

kohsuke-djn
https://hudson.dev.java.net/issues/show_bug.cgi?id=1379



User kohsuke changed the following:

                What    |Old value                 |New value
================================================================================
                  Status|NEW                       |STARTED
--------------------------------------------------------------------------------




------- Additional comments from [hidden email] Tue Mar 11 05:50:46 +0000 2008 -------
Do you restart Hudson everyday? Is that why you think you are forced to re-enter
this everyday?

What protocol do you use to connect to the SVN repository? svn://? http://?

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

[Issue 1379] SVN credentials doesn't sseem to persists correctly

jsbournival-2
In reply to this post by jsbournival-2
https://hudson.dev.java.net/issues/show_bug.cgi?id=1379






------- Additional comments from [hidden email] Tue Mar 11 12:34:21 +0000 2008 -------
>> Do you restart Hudson everyday?

No

>> What protocol do you use to connect to the SVN repository?

svn://

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

[Issue 1379] SVN credentials doesn't sseem to persists correctly

jsbournival-2
In reply to this post by jsbournival-2
https://hudson.dev.java.net/issues/show_bug.cgi?id=1379






------- Additional comments from [hidden email] Wed Apr  9 14:48:48 +0000 2008 -------
I think we figured out what's happening.

We have a bunch of projects, each of them hosted on our subversion host:
svn://svn.our-company.com

Each project has a uri to access it:
svn://svn.our-company.com/project1/trunk
svn://svn.our-company.com/project2/trunk

For each project, we entered different svn credentials.  The problem is that Hudson SVN authentication
key repository seem to store one set of credentials for a given SVN host. (am I right?)  i.e.
svn://svn.our-company.com

So if:
(a) I set the credentials for project1,
(b) and then a different set of credentials for project2,  
(c) project1 credentials will be bumped out of the repository since they are pointing to the same SVN
host

Now, if everything I've said above is right, either one of these is true:

1. we shouldn't use different credentials for different jobs on the same SVN host

OR

2. it's a bug, and we should be able to do that


Discussion point: it could be nice to allow multiple credentials for a given host since SVN users
assigned to a project gets restricted to their sandbox.  IMHO, from a security standpoint, it's a good
thing.

JS.

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

vpt
Reply | Threaded
Open this post in threaded view
|

Re: [Issue 1379] SVN credentials doesn't sseem to persists correctly

vpt
jsbournival-2 wrote
https://hudson.dev.java.net/issues/show_bug.cgi?id=1379

Hi,

I would like to ask what is the state of this issue and how it will be fixed? We have same problem with svn+ssh://.

We have different credentials (user name, password, key file) for every project and the repository is structured as follows:
svn+ssh://svn.our-company.com/project1/trunk
svn+ssh://svn.our-company.com/project2/trunk  
svn+ssh://svn.our-company.com/export/project3/trunk
svn+ssh://svn.our-company.com/export/project4/trunk

Only the latest keys we enter will work. Hudson runs on Windows under Tomcat.

- Vili Törmänen









------- Additional comments from jsbournival@dev.java.net Wed Apr  9 14:48:48 +0000 2008 -------
I think we figured out what's happening.

We have a bunch of projects, each of them hosted on our subversion host:
svn://svn.our-company.com

Each project has a uri to access it:
svn://svn.our-company.com/project1/trunk
svn://svn.our-company.com/project2/trunk

For each project, we entered different svn credentials.  The problem is that Hudson SVN authentication
key repository seem to store one set of credentials for a given SVN host. (am I right?)  i.e.
svn://svn.our-company.com

So if:
(a) I set the credentials for project1,
(b) and then a different set of credentials for project2,  
(c) project1 credentials will be bumped out of the repository since they are pointing to the same SVN
host

Now, if everything I've said above is right, either one of these is true:

1. we shouldn't use different credentials for different jobs on the same SVN host

OR

2. it's a bug, and we should be able to do that


Discussion point: it could be nice to allow multiple credentials for a given host since SVN users
assigned to a project gets restricted to their sandbox.  IMHO, from a security standpoint, it's a good
thing.

JS.

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@hudson.dev.java.net
For additional commands, e-mail: issues-help@hudson.dev.java.net
Reply | Threaded
Open this post in threaded view
|

Re: [Issue 1379] SVN credentials doesn't sseem to persists correctly

issue_police
Hi,

This is a friendly reminder that the 'issues' list is only used for
automatic e-mail notification from the issue tracker, and not meant
for interactive discussion. Please request an observer role for the
project and add the comment to the issue, or please redirect your
e-mails to the 'users' list.

(this is an automatically generated message, and if you have a comment
about this bot itself, please contact [hidden email]

----
Java.net issue tracker auto responder

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

[Issue 1379] SVN credentials doesn't sseem to persists correctly

graemethompson-2
In reply to this post by jsbournival-2
https://hudson.dev.java.net/issues/show_bug.cgi?id=1379






------- Additional comments from [hidden email] Wed Apr 22 14:15:08 +0000 2009 -------
I have just experienced this exact issue, however it turned out to be an issue
with the configuration of the server, specifically, not setting the
authorization realm to be distinct across password databases.

In jsbournival's case you will need to edit the <repos>/conf/svnserve.conf file
for your repository and set the "realm" option to be a unique string per
password database.

For http access through Apache you will need to set the "AuthName" property in
the same fashion.

I would suggest that the resolution of this issue be to update the
documentation/faq for the subversion integration to explain this possible issue.

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

[Issue 1379] SVN credentials doesn't sseem to persists correctly

mdonohue
In reply to this post by jsbournival-2
https://hudson.dev.java.net/issues/show_bug.cgi?id=1379






------- Additional comments from [hidden email] Thu Aug 27 22:06:14 +0000 2009 -------
*** Issue 3758 has been marked as a duplicate of this issue. ***

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

[Issue 1379] SVN credentials are keyed on hostname only

mdonohue
In reply to this post by jsbournival-2
https://hudson.dev.java.net/issues/show_bug.cgi?id=1379



User mdonohue changed the following:

                What    |Old value                 |New value
================================================================================
                 Summary|SVN credentials doesn't ss|SVN credentials are keyed
                        |eem to persists correctly |on hostname only
--------------------------------------------------------------------------------




------- Additional comments from [hidden email] Thu Aug 27 22:07:40 +0000 2009 -------
Clarify summary

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

[Issue 1379] SVN credentials are keyed on hostname only

vidocq
In reply to this post by jsbournival-2
https://hudson.dev.java.net/issues/show_bug.cgi?id=1379



User vidocq changed the following:

                What    |Old value                 |New value
================================================================================
                  Status|STARTED                   |NEW
--------------------------------------------------------------------------------




------- Additional comments from [hidden email] Tue Nov 24 09:41:14 +0000 2009 -------
We have the same problem in our company - one host and a couple projects.
So credentials are not stored and it leads to authorization fail.

Pls, fix it in 1.8 version.

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]