Preventing access

[Craig Graham <cr...@craigshouse.net>]

I'm trying to get svn set up using an AuthzSVNAccessFile to control
multiuser access. Unfortunately I can't seem to stop access to non users
whilst retaining access myself!

Though I can log in fine with the correct username and password, I can
also log in with the wrong credentials and although I get an entry in the
Apache error log such as

[Tue Mar 04 18:36:38 2008] [error] [client 192.168.0.59] user craigg not
found: /repos/projects

or

[Tue Mar 04 18:20:28 2008] [error] [client 192.168.0.59] user craig:
authentication failure for "/repos/projects": Password Mismatch

I find I can still make changes to the repository. I'm using JDeveloper to
get at it, though choice of client shouldn't be an issue. I've confirmed
using direct web page access that the changes are indeed being made and
it's not a local caching thing that gives the illusion. I'm using 1.4.4
which isn't the latest release, but this must be my config issue rather
than a 1.4.4 bug.

Could someone point me in the right direction?

My subversion.conf file is

---------------------------

<Location /repos>
   Order allow,deny
   Allow from all
   DAV svn
   SVNParentPath /mnt/second/srv/svn/repositories
   AuthzSVNAccessFile /mnt/second/srv/svn/svn_access
      # Require SSL connection for password protection.
      #SSLRequireSSL
      #Satisfy Any
      Require valid-user
      AuthType Basic
      AuthName "Subversion repository"
      AuthUserFile /mnt/second/srv/svn/svn_passwd

</Location>

--------------------



svn_access is

--------------------------
[/]
* =

[projects:/]
craig = rw

---------------------------


-- 
Dr. Craig Graham, Software Engineer
Advanced Analysis and Integration Limited, UK. http://www.aail.co.uk/

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org