You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by AN...@L-3Com.com on 2015/08/05 14:51:13 UTC

Can the Apache front end and svnserve service run on the same server?

Can the Apache front end and svnserve service run on the same server?
We are going through a migration.. I'd like to keep the svnserve setup as a fallback.. and until everything gets upgraded.
Will this idea work?

thanks


Re: Can the Apache front end and svnserve service run on the same server?

Posted by Nico Kadel-Garcia <nk...@gmail.com>.
On Wed, Aug 5, 2015 at 8:51 AM,  <AN...@l-3com.com> wrote:
> Can the Apache front end and svnserve service run on the same server?
>
> We are going through a migration.. I’d like to keep the svnserve setup as a
> fallback.. and until everything gets upgraded.
>
> Will this idea work?
>
>
>
> thanks

It can, but it can get tricky. On a Linux or UNIX system, the will
need to be shared by a common group of which both the "svnserve"
daemon user and the Apache daemon user will need to be members, and
the permissions of the writable subdirectories will need to be "2770"
to help ensure that new files are created correctly with the right
ownership. 2770, means no one *else* can see the files, and and uses
the "sgid" bit to help ensure the group ownership is set correctly on
new files: look it up!

Also, you'll need to review your user and group permissions to write
to the repository: Apache can have its own restrictions, on top of
those in svnserve.conf, and it can get tricky to make consistent.

Re: Can the Apache front end and svnserve service run on the sameserver?

Posted by Thorsten Schöning <ts...@am-soft.de>.
Guten Tag bert@qqmail.nl,
am Freitag, 7. August 2015 um 09:53 schrieben Sie:

> http://subversion.apache.org/docs/release-notes/1.7.html#per-repos-authz

Thanks, that's exactly what I looked for.

Mit freundlichen Grüßen,

Thorsten Schöning

-- 
Thorsten Schöning       E-Mail: Thorsten.Schoening@AM-SoFT.de
AM-SoFT IT-Systeme      http://www.AM-SoFT.de/

Telefon...........05151-  9468- 55
Fax...............05151-  9468- 88
Mobil..............0178-8 9468- 04

AM-SoFT GmbH IT-Systeme, Brandenburger Str. 7c, 31789 Hameln
AG Hannover HRB 207 694 - Geschäftsführer: Andreas Muchow


RE: Can the Apache front end and svnserve service run on the sameserver?

Posted by be...@qqmail.nl.
See also http://subversion.apache.org/docs/release-notes/1.7.html#per-repos-authz

Bert

Sent from Mail for Windows 10



From: Thorsten Schöning
Sent: woensdag 5 augustus 2015 21:34
To: users@subversion.apache.org
Subject: Re: Can the Apache front end and svnserve service run on the sameserver?


Guten Tag Stefan Sperling,
am Mittwoch, 5. August 2015 um 14:58 schrieben Sie:

> http://svnbook.red-bean.com/nightly/en/svn.serverconfig.multimethod.html

I have a similar task to do and while your link describes what do to
around file permissions, I wonder how to deal with authentication and
authorization: Each of my repos has it's own passwd and authz file and
I would like to know if it's possible to use those per repo-configs in
httpd?

For the authentication part I guess it might be possible using
mod_perls PerlAuthenHandler[1]. This looks like I could parse passwd
per repo on my own using the repo name from the URL and knowing the
paths to the repos.

But what about "AuthzSVNAccessFile"? It seems like this configuration
only accepts one simple path to one single file and there's no per
repo logic available. I wouldn't want to merge all my authz files to
one big one for maintenance reasons and such. Is there any way to hook
into processing of AuthzSVNAccessFile and to dynamically provide the
needed data or build the path to the file using some placeholders,
where one placeholder is the name of the repo or such?

There's PerlAuthzHandler[2] for mod_perl again, but I wouldn't want to
reimplement the processing logic of authz files itself, just would
like to have more influence which path to choose on each request.

[1] https://perl.apache.org/docs/2.0/user/handlers/http.html#PerlAuthenHandler
[2] https://perl.apache.org/docs/2.0/user/handlers/http.html#PerlAuthzHandler

Mit freundlichen Grüßen,

Thorsten Schöning

-- 
Thorsten Schöning       E-Mail: Thorsten.Schoening@AM-SoFT.de
AM-SoFT IT-Systeme      http://www.AM-SoFT.de/

Telefon...........05151-  9468- 55
Fax...............05151-  9468- 88
Mobil..............0178-8 9468- 04

AM-SoFT GmbH IT-Systeme, Brandenburger Str. 7c, 31789 Hameln
AG Hannover HRB 207 694 - Geschäftsführer: Andreas Muchow




Re: Can the Apache front end and svnserve service run on the same server?

Posted by Thorsten Schöning <ts...@am-soft.de>.
Guten Tag Stefan Sperling,
am Mittwoch, 5. August 2015 um 14:58 schrieben Sie:

> http://svnbook.red-bean.com/nightly/en/svn.serverconfig.multimethod.html

I have a similar task to do and while your link describes what do to
around file permissions, I wonder how to deal with authentication and
authorization: Each of my repos has it's own passwd and authz file and
I would like to know if it's possible to use those per repo-configs in
httpd?

For the authentication part I guess it might be possible using
mod_perls PerlAuthenHandler[1]. This looks like I could parse passwd
per repo on my own using the repo name from the URL and knowing the
paths to the repos.

But what about "AuthzSVNAccessFile"? It seems like this configuration
only accepts one simple path to one single file and there's no per
repo logic available. I wouldn't want to merge all my authz files to
one big one for maintenance reasons and such. Is there any way to hook
into processing of AuthzSVNAccessFile and to dynamically provide the
needed data or build the path to the file using some placeholders,
where one placeholder is the name of the repo or such?

There's PerlAuthzHandler[2] for mod_perl again, but I wouldn't want to
reimplement the processing logic of authz files itself, just would
like to have more influence which path to choose on each request.

[1] https://perl.apache.org/docs/2.0/user/handlers/http.html#PerlAuthenHandler
[2] https://perl.apache.org/docs/2.0/user/handlers/http.html#PerlAuthzHandler

Mit freundlichen Grüßen,

Thorsten Schöning

-- 
Thorsten Schöning       E-Mail: Thorsten.Schoening@AM-SoFT.de
AM-SoFT IT-Systeme      http://www.AM-SoFT.de/

Telefon...........05151-  9468- 55
Fax...............05151-  9468- 88
Mobil..............0178-8 9468- 04

AM-SoFT GmbH IT-Systeme, Brandenburger Str. 7c, 31789 Hameln
AG Hannover HRB 207 694 - Geschäftsführer: Andreas Muchow


Re: Can the Apache front end and svnserve service run on the same server?

Posted by Stefan Sperling <st...@elego.de>.
On Wed, Aug 05, 2015 at 12:51:13PM +0000, ANDREW.LUCAS@L-3Com.com wrote:
> Can the Apache front end and svnserve service run on the same server?

See http://svnbook.red-bean.com/nightly/en/svn.serverconfig.multimethod.html
>