Problem wirh "svn copy". (Trying to access the root of the repository?)

[Dipukumar M <di...@satyam.com>]

Hello,

I am using Subversion 1.5.2 + Apache 2.2.9 setup to provide http/https access to the repository users at offshore location. Apache is also configured with "mod_auth_sspi" to provide AD based authentication and authorization(project based) is done by listing the users properly in the "AuthZSVNAccessFile".

The issue is that whenever a user tries to copy a folder to different location(tagging/branching etc) in their project repository. During those operations, "svn copy" is trying to access the root of  the repository.
If the user is provided with access to the root level, the operation will work fine.

But because of the company policies, I can't provide access to the root repository to an offshore user.
Interestingly, I have not faced this issue with Subversion 1.4.4 and an upgrade of my repository to Subversion 1.5.2 introduced this issue.
So why is it that the copy does a PROPFIND on the root of the repo? Any suggestions on a solution?

PS:

The  "Location " directive in Apache is as follows,

<Location /repository>
  DAV svn
  SVNPath <Path to repository>
  AuthName "<Message>"
  AuthType SSPI
  SSPIAuth On
  SSPIAuthoritative On
  SSPIOfferBasic On
  require valid-user
  AuthzSVNAccessFile "<path to the directory>\svnaccess.conf"
</Location>
Root of the repository : "repository"
Project location : "projects/proj_a"
proj_a administrator : "projaadmin" (this user have RW privileges to the project location ("repository/projects/proj_a") but does not have any privileges on the repository root ("repository")


Deatils:

Command executed:

svn copy --username <domain>\projadmin http://ourserver/repository/projects/proj_a/trunk http://ourserver/repository/projects/proj_a/tags/baseline1

Error shown:
svn: PROPFIND request failed on 'repository:/'
svn: PROPFIND of 'repository:/': authorization failed

Error log from Apache:
[Fri Jan 16 13:24:31 2009] [error] [client 127.0.0.1] Access denied: '<domain>\\projaadmin' PROPFIND repository:/


Thanks in advance,
Regards,
Dipukumar M

________________________________
DISCLAIMER:
This email (including any attachments) is intended for the sole use of the intended recipient/s and may contain material that is CONFIDENTIAL AND PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying or distribution or forwarding of any or all of the contents in this message is STRICTLY PROHIBITED. If you are not the intended recipient, please contact the sender by email and delete all copies; your cooperation in this regard is appreciated.

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1027921

To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].

RE: Re: Problem wirh "svn copy". (Trying to access the root of the repository?)

[po...@tigris.org]

Hello,

Thank you for your reply. But when I tried with that option, the authorization started failing.
That time it was complaining with the following message,
svn: PROPFIND of 'repository:/projects/pro​j_a/trunk : authorization failed

I am thinking that there is something wrong with the Subversion 1.5.2 client api.
With the same setup, if I am trying to do the same operation with Subversion 1.4.4 client(command line/Tortoise SVN), that is working perfectly fine.
I'm now trying to pinpoint where the problem is.

Thanks,
Dipukumar M

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1033616

To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].

RE: Re: Problem wirh "svn copy". (Trying to access the root of the repository?)

[Dipukumar M <di...@satyam.com>]

Thank you for your reply. But when I tried with that option, the authorization started failing.
That time it was complaining with the following message,
svn: PROPFIND of 'repository:/projects/pro​j_a/trunk : authorization failed

I am thinking that there is something wrong with the Subversion 1.5.2 client api.
With the same setup, if I am trying to do the same operation with Subversion 1.4.4 client(command line/Tortoise SVN), that is working perfectly fine.
I'm now trying to pin point where the problem is.

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1040032

To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].

Re: Problem wirh "svn copy". (Trying to access the root of the repository?)

[Matthew Richardson <M....@ed.ac.uk>]

Dipukumar M wrote:
> But because of the company policies, I can't provide access to the
> root repository to an offshore user.
> Interestingly, I have not faced this issue with Subversion 1.4.4 and
> an upgrade of my repository to Subversion 1.5.2 introduced this issue.
> So why is it that the copy does a PROPFIND on the root of the repo?
> Any suggestions on a solution?
No idea if this will work, but try wrapping the 'require valid-user'
with a LimitExcept, excluding PROPFIND:

<LimitExcept PROPFIND>
    Require valid-user
</LimitExcept>

You might need to do the same for other actions, such as OPTIONS or REPORT.

Matthew


-- 
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.