How do I allow clients to authenticate against a Windows domain controller using SSPI authentication?
TortoiseSVN has an excellent document that describes setting up a Subversion server on Windows. Go to http://tortoisesvn.tigris.org/doc/ch03.html, then click on “Authentication With A Windows Domain” to see the section on SSPI authentication. An earlier version of this document left out a line: SSPIOfferBasic On Without this line, a browser will prompt for the user’s credentials, but Subversion clients will not. (The browser understands SSPI authentication, but the current release of Neon – Subversion’s HTTP library – handles only basic authentication.) Because the client never asks for credentials, any action that requires authentication will fail. Adding this line tells mod_auth_sspi to use basic authentication with the client, but to use the Windows domain controller to authenticate the credentials.
