You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@subversion.apache.org by Rainer Jung <ra...@kippdata.de> on 2012/07/15 22:57:37 UTC
Problem report: commit failed with E195023: Changing file ... is
forbidden by the server
I had an IRC chat with Daniel Shahaf who recommended to open an issue
here after checking the issues at tigris. I didn't find this problem
there, so here it is:
Using svn 1.7.5 on Solaris 10 Sparc compiled with gcc 4.7.1.
Libs: apr 1.4.6, apr-util 1.4.1,
serf 1.1.0, neon 0.29.6,
OpenSSL 1.0.1c, SQLite 3.7.13,
libmagic from file 5.11
I wanted to commit a change in the ASF repository for the httpd web
server. Error message (all day):
Sending include/httpd.h
Sending modules/http/http_protocol.c
Sending modules/lua/lua_vmprep.c
Transmitting file data .svn: E195023: Commit failed (details follow):
svn: E195023: Changing file
'/shared/build/dev/httpd/svn/httpd/trunk-clean-17/modules/lua/lua_vmprep.c'
is forbidden by the server
svn: E175013: Access to
'/repos/asf/!svn/txr/1361779-tqiq/httpd/httpd/trunk/modules/lua/lua_vmprep.c'
forbidden
My IP when talking to the server: 195.227.30.235
Server IP: 140.211.11.4
Daniel recommended to try
svn commit --config-option=servers:global:http-libray=serf
to make sure serf is chosen and not neon. The commit then worked:
http://svn.apache.org/viewvc?rev=1361784&view=rev
But: after this another commit worked even without the config-option and
without any change to svn configuration:
http://svn.apache.org/viewvc?rev=1361791&view=rev
This is the access log entry that Daniel extacted for the second
successful commit (r1361791).
rjung [15/Jul/2012:20:29:56 +0000] "PUT
/repos/asf/!svn/txr/1361790-tqj7/httpd/httpd/trunk/include/httpd.h
HTTP/1.1" 204 - "-" "SVN/1.7.5 neon/0.29.6" - 443
Unfortunately currently I can't reproduce :(
Regards,
Rainer
Re: Problem report: commit failed with E195023: Changing file ... is
forbidden by the server
Posted by Daniel Shahaf <d....@daniel.shahaf.name>.
Rainer Jung wrote on Mon, Jul 16, 2012 at 10:44:54 +0200:
> Now: Daniel changed something w.r.t. my LDAP groups at around 20:18.
> The first attempt after that was still not successful, but maybe it
> took a few seconds to propagate or something. So I'd say we close
> this issue.
>
> Sorry for the noise and thanks for listening.
Agreed. Thanks for the bug report, please let us know if you can
reproduce the errors (without any concurrent ldap changes).
Re: Problem report: commit failed with E195023: Changing file ... is
forbidden by the server
Posted by Daniel Shahaf <d....@daniel.shahaf.name>.
Rainer Jung wrote on Tue, Jul 17, 2012 at 08:44:18 +0200:
> On 17.07.2012 03:36, Greg Stein wrote:
> >
> >On Jul 16, 2012 1:45 AM, "Rainer Jung" <rainer.jung@kippdata.de
> ><ma...@kippdata.de>> wrote:
> > >...
> > > Now: Daniel changed something w.r.t. my LDAP groups at around 20:18.
> >The first attempt after that was still not successful, but maybe it took
> >a few seconds to propagate or something. So I'd say we close this issue.
> >
> >I'd be curious what that LDAP change was, just to ensure it could be
> >related. (eg. adding commit privs to Tomcat is unlikely to have fixed an
> >httpd commit)
>
> He added me to the httpd group, so yes, related.
>
> But: I was able to commit to httpd for years, last commit before the
> problem was on February 26:
>
> http://svn.apache.org/viewvc?rev=1293800&view=rev
>
> I think I noticed that I wasn't in the httpd group some years ago
> but didn't bother because everything worked. So if I remember right
> the group wasn't lost recently. It is kind of unclear why this still
> worked in Feb. but no longer this week. But IMHO it's more of an
> infra question than a subversion dev thing.
>
The [/httpd] authz settings were changed (simplified) some time ago,
check your private@ list or the svn logs of the authz file for details.
Re: Problem report: commit failed with E195023: Changing file ...
is forbidden by the server
Posted by Rainer Jung <ra...@kippdata.de>.
On 17.07.2012 03:36, Greg Stein wrote:
>
> On Jul 16, 2012 1:45 AM, "Rainer Jung" <rainer.jung@kippdata.de
> <ma...@kippdata.de>> wrote:
> >...
> > Now: Daniel changed something w.r.t. my LDAP groups at around 20:18.
> The first attempt after that was still not successful, but maybe it took
> a few seconds to propagate or something. So I'd say we close this issue.
>
> I'd be curious what that LDAP change was, just to ensure it could be
> related. (eg. adding commit privs to Tomcat is unlikely to have fixed an
> httpd commit)
He added me to the httpd group, so yes, related.
But: I was able to commit to httpd for years, last commit before the
problem was on February 26:
http://svn.apache.org/viewvc?rev=1293800&view=rev
I think I noticed that I wasn't in the httpd group some years ago but
didn't bother because everything worked. So if I remember right the
group wasn't lost recently. It is kind of unclear why this still worked
in Feb. but no longer this week. But IMHO it's more of an infra question
than a subversion dev thing.
Mostly an unfortunate chain of things to happen
- observed commit problem
- got the info that svn was read-only and should be back to read/write
- tried again without success, waited a few hours
- upgraded svn client, tried again without success
- then info that httpd group is missing, added to the httpd group
- tried again without success
- then tried with the serf config option not noticing the typo
- hurray: success
- thought it could be a bug because it seemed to work with serf
and not with neon. But in fact was using neon all the time
due to typo in config option
- then tried later without any option and again it worked
Regards,
Rainer
Re: Problem report: commit failed with E195023: Changing file ... is
forbidden by the server
Posted by Daniel Shahaf <da...@apache.org>.
Greg Stein wrote on Mon, Jul 16, 2012 at 21:36:17 -0400:
> On Jul 16, 2012 1:45 AM, "Rainer Jung" <ra...@kippdata.de> wrote:
> >...
> > Now: Daniel changed something w.r.t. my LDAP groups at around 20:18. The
> first attempt after that was still not successful, but maybe it took a few
> seconds to propagate or something. So I'd say we close this issue.
>
> I'd be curious what that LDAP change was, just to ensure it could be
> related. (eg. adding commit privs to Tomcat is unlikely to have fixed an
> httpd commit)
>
Yes, it might be related. See my mail to private@httpd for the details.
> Cheers,
> -g
Re: Problem report: commit failed with E195023: Changing file ... is
forbidden by the server
Posted by Greg Stein <gs...@gmail.com>.
On Jul 16, 2012 1:45 AM, "Rainer Jung" <ra...@kippdata.de> wrote:
>...
> Now: Daniel changed something w.r.t. my LDAP groups at around 20:18. The
first attempt after that was still not successful, but maybe it took a few
seconds to propagate or something. So I'd say we close this issue.
I'd be curious what that LDAP change was, just to ensure it could be
related. (eg. adding commit privs to Tomcat is unlikely to have fixed an
httpd commit)
Cheers,
-g
Re: Problem report: commit failed with E195023: Changing file ...
is forbidden by the server
Posted by Rainer Jung <ra...@kippdata.de>.
On 16.07.2012 00:56, Daniel Shahaf wrote:
> Bert Huijben wrote on Sun, Jul 15, 2012 at 23:40:36 +0200:
>>
>>
>>> -----Original Message-----
>>> From: Rainer Jung [mailto:rainer.jung@kippdata.de]
>>> Sent: zondag 15 juli 2012 22:58
>>> To: Subversion Development
>>> Subject: Problem report: commit failed with E195023: Changing file ... is
>>> forbidden by the server
>>>
>>> I had an IRC chat with Daniel Shahaf who recommended to open an issue
>>> here after checking the issues at tigris. I didn't find this problem
>>> there, so here it is:
>>>
>>> Using svn 1.7.5 on Solaris 10 Sparc compiled with gcc 4.7.1.
>>>
>>> Libs: apr 1.4.6, apr-util 1.4.1,
>>> serf 1.1.0, neon 0.29.6,
>>> OpenSSL 1.0.1c, SQLite 3.7.13,
>>> libmagic from file 5.11
>>>
>>> I wanted to commit a change in the ASF repository for the httpd web
>>> server. Error message (all day):
>>>
>>> Sending include/httpd.h
>>> Sending modules/http/http_protocol.c
>>> Sending modules/lua/lua_vmprep.c
>>> Transmitting file data .svn: E195023: Commit failed (details follow):
>>> svn: E195023: Changing file
>>> '/shared/build/dev/httpd/svn/httpd/trunk-clean-
>>> 17/modules/lua/lua_vmprep.c'
>>> is forbidden by the server
>>> svn: E175013: Access to
>>> '/repos/asf/!svn/txr/1361779-
>>> tqiq/httpd/httpd/trunk/modules/lua/lua_vmprep.c'
>>> forbidden
>>>
>>> My IP when talking to the server: 195.227.30.235
>>> Server IP: 140.211.11.4
>>>
>>> Daniel recommended to try
>>>
>>> svn commit --config-option=servers:global:http-libray=serf
>>
>> If this is the exact commandline the option is ignored, because there is a
>> typo in the option name.
>> (It would also be ignored with the correct commandline if your Subversion
>> isn't compiled against serf)
It was compiled against both, so neon and serf are available. Sorry that
I didn't notice the typo.
> eris,0:log/vc% grep 195.227.30.235 access_log | grep -w serf | wc -l
> 0
>
> Is there still a bug here then? I asked Rainer to raise a bug because
> it seemed to be a "works with serf, fails with neon" issue, but now that
> has been ruled out.
Yes, the logs say everything was done with neon.
>> Did Daniel also get the log entry from the failed commit?
>>
>
> svn.apache.org 195.227.30.235 - rjung [15/Jul/2012:20:20:14 +0000] "PUT /repos/asf/!svn/txr/1361783-tqiz/httpd/httpd/trunk/include/httpd.h HTTP/1.1" 403 323 "-" "SVN/1.7.5 neon/0.29.6" - 443
This was actually from a failed one (PUT with 403)
This is the log snippet from one of the failed attempts:
svn.apache.org 195.227.30.235 - - [15/Jul/2012:20:20:12 +0000] "OPTIONS
/repos/asf/httpd/httpd/trunk HTTP/1.1" 200 147 "-" "SVN/1.7.5
neon/0.29.6" - 443
svn.apache.org 195.227.30.235 - - [15/Jul/2012:20:20:13 +0000] "POST
/repos/asf/!svn/me HTTP/1.1" 401 392 "-" "SVN/1.7.5 neon/0.29.6" - 443
svn.apache.org 195.227.30.235 - rjung [15/Jul/2012:20:20:13 +0000] "POST
/repos/asf/!svn/me HTTP/1.1" 201 20 "-" "SVN/1.7.5 neon/0.29.6" - 443
svn.apache.org 195.227.30.235 - rjung [15/Jul/2012:20:20:14 +0000]
"PROPPATCH /repos/asf/!svn/txn/1361783-tqiz HTTP/1.1" 207 245 "-"
"SVN/1.7.5 neon/0.29.6" - 443
svn.apache.org 195.227.30.235 - rjung [15/Jul/2012:20:20:14 +0000] "PUT
/repos/asf/!svn/txr/1361783-tqiz/httpd/httpd/trunk/include/httpd.h
HTTP/1.1" 403 323 "-" "SVN/1.7.5 neon/0.29.6" - 443
svn.apache.org 195.227.30.235 - rjung [15/Jul/2012:20:20:15 +0000]
"DELETE /repos/asf/!svn/txn/1361783-tqiz HTTP/1.1" 204 - "-" "SVN/1.7.5
neon/0.29.6" - 443
The last one wth the PUT gets a 403. Everything is done with neon.
Error Log says:
[Sun Jul 15 20:20:14 2012] [error] [client 195.227.30.235] Access
denied: 'rjung' PUT asf:/httpd/httpd/trunk/include/httpd.h
The successful one was:
svn.apache.org 195.227.30.235 - - [15/Jul/2012:20:21:59 +0000] "OPTIONS
/repos/asf/httpd/httpd/trunk HTTP/1.1" 200 147 "-" "SVN/1.7.5
neon/0.29.6" - 443
svn.apache.org 195.227.30.235 - - [15/Jul/2012:20:22:00 +0000] "POST
/repos/asf/!svn/me HTTP/1.1" 401 392 "-" "SVN/1.7.5 neon/0.29.6" - 443
svn.apache.org 195.227.30.235 - rjung [15/Jul/2012:20:22:00 +0000] "POST
/repos/asf/!svn/me HTTP/1.1" 201 20 "-" "SVN/1.7.5 neon/0.29.6" - 443
svn.apache.org 195.227.30.235 - rjung [15/Jul/2012:20:22:01 +0000]
"PROPPATCH /repos/asf/!svn/txn/1361783-tqj0 HTTP/1.1" 207 245 "-"
"SVN/1.7.5 neon/0.29.6" - 443
svn.apache.org 195.227.30.235 - rjung [15/Jul/2012:20:22:01 +0000] "PUT
/repos/asf/!svn/txr/1361783-tqj0/httpd/httpd/trunk/modules/lua/lua_vmprep.c
HTTP/1.1" 204 - "-" "SVN/1.7.
5 neon/0.29.6" - 443
svn.apache.org 195.227.30.235 - rjung [15/Jul/2012:20:22:02 +0000] "PUT
/repos/asf/!svn/txr/1361783-tqj0/httpd/httpd/trunk/modules/http/http_protocol.c
HTTP/1.1" 204 - "-" "SVN/
1.7.5 neon/0.29.6" - 443
svn.apache.org 195.227.30.235 - rjung [15/Jul/2012:20:22:02 +0000] "PUT
/repos/asf/!svn/txr/1361783-tqj0/httpd/httpd/trunk/include/httpd.h
HTTP/1.1" 204 - "-" "SVN/1.7.5 neon/0.
29.6" - 443
svn.apache.org 195.227.30.235 - rjung [15/Jul/2012:20:22:02 +0000]
"MERGE /repos/asf/httpd/httpd/trunk HTTP/1.1" 200 389 "-" "SVN/1.7.5
neon/0.29.6" - 443
Now: Daniel changed something w.r.t. my LDAP groups at around 20:18. The
first attempt after that was still not successful, but maybe it took a
few seconds to propagate or something. So I'd say we close this issue.
Sorry for the noise and thanks for listening.
Rainer
> The full logs will be on people.a.o:/x1/logarchive/eris/vc/2012/07/
> tomorrow.
>
>> Bert
>>>
>>> to make sure serf is chosen and not neon. The commit then worked:
>>>
>>> http://svn.apache.org/viewvc?rev=1361784&view=rev
>>>
>>> But: after this another commit worked even without the config-option and
>>> without any change to svn configuration:
>>>
>>> http://svn.apache.org/viewvc?rev=1361791&view=rev
>>>
>>> This is the access log entry that Daniel extacted for the second
>>> successful commit (r1361791).
>>>
>>> rjung [15/Jul/2012:20:29:56 +0000] "PUT
>>> /repos/asf/!svn/txr/1361790-tqj7/httpd/httpd/trunk/include/httpd.h
>>> HTTP/1.1" 204 - "-" "SVN/1.7.5 neon/0.29.6" - 443
>>>
>>> Unfortunately currently I can't reproduce :(
>>>
>>> Regards,
>>>
>>> Rainer
Re: Problem report: commit failed with E195023: Changing file ... is
forbidden by the server
Posted by Daniel Shahaf <d....@daniel.shahaf.name>.
Bert Huijben wrote on Sun, Jul 15, 2012 at 23:40:36 +0200:
>
>
> > -----Original Message-----
> > From: Rainer Jung [mailto:rainer.jung@kippdata.de]
> > Sent: zondag 15 juli 2012 22:58
> > To: Subversion Development
> > Subject: Problem report: commit failed with E195023: Changing file ... is
> > forbidden by the server
> >
> > I had an IRC chat with Daniel Shahaf who recommended to open an issue
> > here after checking the issues at tigris. I didn't find this problem
> > there, so here it is:
> >
> > Using svn 1.7.5 on Solaris 10 Sparc compiled with gcc 4.7.1.
> >
> > Libs: apr 1.4.6, apr-util 1.4.1,
> > serf 1.1.0, neon 0.29.6,
> > OpenSSL 1.0.1c, SQLite 3.7.13,
> > libmagic from file 5.11
> >
> > I wanted to commit a change in the ASF repository for the httpd web
> > server. Error message (all day):
> >
> > Sending include/httpd.h
> > Sending modules/http/http_protocol.c
> > Sending modules/lua/lua_vmprep.c
> > Transmitting file data .svn: E195023: Commit failed (details follow):
> > svn: E195023: Changing file
> > '/shared/build/dev/httpd/svn/httpd/trunk-clean-
> > 17/modules/lua/lua_vmprep.c'
> > is forbidden by the server
> > svn: E175013: Access to
> > '/repos/asf/!svn/txr/1361779-
> > tqiq/httpd/httpd/trunk/modules/lua/lua_vmprep.c'
> > forbidden
> >
> > My IP when talking to the server: 195.227.30.235
> > Server IP: 140.211.11.4
> >
> > Daniel recommended to try
> >
> > svn commit --config-option=servers:global:http-libray=serf
>
> If this is the exact commandline the option is ignored, because there is a
> typo in the option name.
> (It would also be ignored with the correct commandline if your Subversion
> isn't compiled against serf)
>
eris,0:log/vc% grep 195.227.30.235 access_log | grep -w serf | wc -l
0
Is there still a bug here then? I asked Rainer to raise a bug because
it seemed to be a "works with serf, fails with neon" issue, but now that
has been ruled out.
> Did Daniel also get the log entry from the failed commit?
>
svn.apache.org 195.227.30.235 - rjung [15/Jul/2012:20:20:14 +0000] "PUT /repos/asf/!svn/txr/1361783-tqiz/httpd/httpd/trunk/include/httpd.h HTTP/1.1" 403 323 "-" "SVN/1.7.5 neon/0.29.6" - 443
The full logs will be on people.a.o:/x1/logarchive/eris/vc/2012/07/
tomorrow.
> Bert
> >
> > to make sure serf is chosen and not neon. The commit then worked:
> >
> > http://svn.apache.org/viewvc?rev=1361784&view=rev
> >
> > But: after this another commit worked even without the config-option and
> > without any change to svn configuration:
> >
> > http://svn.apache.org/viewvc?rev=1361791&view=rev
> >
> > This is the access log entry that Daniel extacted for the second
> > successful commit (r1361791).
> >
> > rjung [15/Jul/2012:20:29:56 +0000] "PUT
> > /repos/asf/!svn/txr/1361790-tqj7/httpd/httpd/trunk/include/httpd.h
> > HTTP/1.1" 204 - "-" "SVN/1.7.5 neon/0.29.6" - 443
> >
> > Unfortunately currently I can't reproduce :(
> >
> > Regards,
> >
> > Rainer
>
RE: Problem report: commit failed with E195023: Changing file ... is forbidden by the server
Posted by Bert Huijben <be...@qqmail.nl>.
> -----Original Message-----
> From: Rainer Jung [mailto:rainer.jung@kippdata.de]
> Sent: zondag 15 juli 2012 22:58
> To: Subversion Development
> Subject: Problem report: commit failed with E195023: Changing file ... is
> forbidden by the server
>
> I had an IRC chat with Daniel Shahaf who recommended to open an issue
> here after checking the issues at tigris. I didn't find this problem
> there, so here it is:
>
> Using svn 1.7.5 on Solaris 10 Sparc compiled with gcc 4.7.1.
>
> Libs: apr 1.4.6, apr-util 1.4.1,
> serf 1.1.0, neon 0.29.6,
> OpenSSL 1.0.1c, SQLite 3.7.13,
> libmagic from file 5.11
>
> I wanted to commit a change in the ASF repository for the httpd web
> server. Error message (all day):
>
> Sending include/httpd.h
> Sending modules/http/http_protocol.c
> Sending modules/lua/lua_vmprep.c
> Transmitting file data .svn: E195023: Commit failed (details follow):
> svn: E195023: Changing file
> '/shared/build/dev/httpd/svn/httpd/trunk-clean-
> 17/modules/lua/lua_vmprep.c'
> is forbidden by the server
> svn: E175013: Access to
> '/repos/asf/!svn/txr/1361779-
> tqiq/httpd/httpd/trunk/modules/lua/lua_vmprep.c'
> forbidden
>
> My IP when talking to the server: 195.227.30.235
> Server IP: 140.211.11.4
>
> Daniel recommended to try
>
> svn commit --config-option=servers:global:http-libray=serf
If this is the exact commandline the option is ignored, because there is a
typo in the option name.
(It would also be ignored with the correct commandline if your Subversion
isn't compiled against serf)
Did Daniel also get the log entry from the failed commit?
Bert
>
> to make sure serf is chosen and not neon. The commit then worked:
>
> http://svn.apache.org/viewvc?rev=1361784&view=rev
>
> But: after this another commit worked even without the config-option and
> without any change to svn configuration:
>
> http://svn.apache.org/viewvc?rev=1361791&view=rev
>
> This is the access log entry that Daniel extacted for the second
> successful commit (r1361791).
>
> rjung [15/Jul/2012:20:29:56 +0000] "PUT
> /repos/asf/!svn/txr/1361790-tqj7/httpd/httpd/trunk/include/httpd.h
> HTTP/1.1" 204 - "-" "SVN/1.7.5 neon/0.29.6" - 443
>
> Unfortunately currently I can't reproduce :(
>
> Regards,
>
> Rainer