CentOS 6.4.
We've got a subversion repo on a server. Currently, it's set to use krb5. Trouble is, the krb5.conf is set up to use pcscd authentication (using PIV cards). Whether anything else on the server needs it, it appears that when people issue certain svn commands (I haven't nailed down which), the thing tries to look at the pcscd.pid... and selinux complains that this is naughty. (We're in permissive mode.)
I don't know deeply enough if anything else really needs to do this on the server, but I'd like to fix it so that doing svn stuff does *not* invoke that call. It *appears* if I comment out the pkinit_identities, we don't get the error (for obvious reasons).
Ideally, I'd like to find some way to configure subversion - maybe in the /etc/httpd/conf.d/subversion.conf - so that it doesn't try that, but we *do* want it to do password krb5 authentication.
Does this make sense? If so, is it do-able?
mark, back at googling