Uploaded image for project: 'Subversion'
  1. Subversion
  2. SVN-2242

auth cache picking up password from wrong username entry

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Minor
    • Resolution: Fixed
    • all
    • 1.5.1
    • libsvn_subr
    • None

    Description

      # assuming a repo at /svn
      
      # create svnserve.conf like so:
      [general]
      password-db = users
      realm = soundgeek
      
      # anonymous users can do nothing
      anon-access = none
      
      # authenticated users can both read and write
      auth-access = write
      
      # create a users file like so (note that user1 and user2 have the same password):
      [users]
      user1 = passw
      user2 = passw
      
      # run svnserve
      svnserve -d
      
      # co repo as user1
      svn co svn://localhost/svn user1 --username user1
      < enter password >
      
      # co repo as user2
      svn co svn://localhost/svn user2 --username user2
      
      *** no password is requested and the checkout occurs ***
      
      If I look in the auth/svn.simple/ file for this realm, it has been updated with user2's username.
      
      K 8
      password
      V 5
      passw
      K 15
      svn:realmstring
      V 32
      <svn://localhost:3690> soundgeek
      K 8
      username
      V 5
      user2
      END
      
      Even though the passwords are the same, should the auth system be picking up the cached password 
      from user1?  Seems like a bug.
      
      svn, version 1.1.3 (r12730)
      

      Original issue reported by soundgeek

      Attachments

        Activity

          People

            Unassigned Unassigned
            subversion-importer Subversion Importer
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: