Empty repository root via web...

[Trent Fisher <tr...@oracle.com>]

I am working to upgrade my servers to SVN 1.7.8 and just ran into a 
weird issue.  If I look at the repository via the web, it shows up as 
empty.  At first I thought it was something with the repos-web 
stylesheet I'm using, but looking at the page source I see this:

<svn version="1.7.8 (r1419691)"
      href="http://subversion.apache.org/">
   <index rev="119763" path="/" base="foobar">
   </index>
</svn>

But if I use that exact same URL on the command line, it works as I expect:

$ svn ls https://adc4110316.us.oracle.com/svn/foobar/
README
branches/
tags/
trunk/

Furthermore my WebSVN pages show the repository correctly, so this isn't 
a show-stopper.  If I access a subdirectory it works correctly via all 
three methods.

FYI, here's my apache config (slightly redacted) for that repository 
(this is the exact same config I'm using for my 1.6 servers):

<Location /svn/foobar>
    DAV svn
    SVNPath /scm/svn/repos/foobar
    SVNIndexXSLT "/repos-web/view/repos.xsl"
    SVNPathAuthz on
    AuthzSVNAccessFile /scm/svn/repos/foobar/conf/authz
    AuthType Basic
    AuthLDAPURL  ldap://[...]
    AuthzLDAPAuthoritative On
    Require valid-user
    Satisfy Any
</Location>

The authz file contains only "[/]" and "$authenticated = r", so I 
certainly should be able to read it.

After a bit more testing, I think I figured it out.  When I access the 
top of the repository, it does not request authentication via the web 
(and, thus, gives me an empty page since anonymous access is not 
permitted), but it does request authentication via the svn client and 
websvn.  But if I access a subdirectory, it requests authentication in 
all three cases and works as expected.  However, my SVN 1.6 server will 
request authentication in all cases.  So this seems to be a change in 
1.7, is it a bug or something that changed in 1.7 and requires config 
file changes?

++thanks,
trent...

Re: Empty repository root via web...

[Johan Corveleyn <jc...@gmail.com>]

On Thu, Jan 17, 2013 at 11:42 PM, Trent Fisher <tr...@oracle.com> wrote:
> I am working to upgrade my servers to SVN 1.7.8 and just ran into a weird
> issue.  If I look at the repository via the web, it shows up as empty.  At
> first I thought it was something with the repos-web stylesheet I'm using,
> but looking at the page source I see this:
>
> <svn version="1.7.8 (r1419691)"
>      href="http://subversion.apache.org/">
>   <index rev="119763" path="/" base="foobar">
>   </index>
> </svn>
>
> But if I use that exact same URL on the command line, it works as I expect:
>
> $ svn ls https://adc4110316.us.oracle.com/svn/foobar/
> README
> branches/
> tags/
> trunk/
>
> Furthermore my WebSVN pages show the repository correctly, so this isn't a
> show-stopper.  If I access a subdirectory it works correctly via all three
> methods.
>
> FYI, here's my apache config (slightly redacted) for that repository (this
> is the exact same config I'm using for my 1.6 servers):
>
> <Location /svn/foobar>
>    DAV svn
>    SVNPath /scm/svn/repos/foobar
>    SVNIndexXSLT "/repos-web/view/repos.xsl"
>    SVNPathAuthz on
>    AuthzSVNAccessFile /scm/svn/repos/foobar/conf/authz
>    AuthType Basic
>    AuthLDAPURL  ldap://[...]
>    AuthzLDAPAuthoritative On
>    Require valid-user
>    Satisfy Any
> </Location>
>
> The authz file contains only "[/]" and "$authenticated = r", so I certainly
> should be able to read it.
>
> After a bit more testing, I think I figured it out.  When I access the top
> of the repository, it does not request authentication via the web (and,
> thus, gives me an empty page since anonymous access is not permitted), but
> it does request authentication via the svn client and websvn.  But if I
> access a subdirectory, it requests authentication in all three cases and
> works as expected.  However, my SVN 1.6 server will request authentication
> in all cases.  So this seems to be a change in 1.7, is it a bug or something
> that changed in 1.7 and requires config file changes?

I don't know the details, but I have seen some discussions on the
dev-list which seem to be related to this. I think the relevant part
starts here:

  http://svn.haxx.se/dev/archive-2012-10/0268.shtml

(or some other posts which you can find by searching the archives on
"Authz on Collection of Repositories").

I think this has recently been fixed on trunk. See this line in the
CHANGES file on trunk:
  * SVNParentPath / repository listing now authz-filtered (r1408184)

So if that's your issue, it will probably be fixed in 1.8.
-- 
Johan