You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by dr...@visetics.de on 2010/09/01 07:54:34 UTC

authz File ignored?

Hello,

i am using SVN via mod_dav_svn in apache. The user authentification is processed via NTLM. Later wehen the user is authenticated, i would like to have a authz file what ensures, that the person is permitted to access the svn repository and path. The configuration:
=== 8< ===
<VirtualHost svn-repository.intern.xxxxx.de:1234>
  DocumentRoot /export/home/svn-test/repository
  ServerName svn-repository.intern.xxxxx.de
  <Location /svn>
    AuthName "ZVD-Wiki"
    AuthType NTLM
    NTLMAuth on
    NTLMAuthoritative off
    NTLMDomain xxxxx_xxxxx
    NTLMServer xxxxx-xxxxx
    NTLMBackup xxxxx-xxxxx
    NTLMBasicAuth on
    Require valid-user
    Options +Indexes
    Satisfy Any
    DAV svn
    SVNParentPath /export/home/svn-test/repository
    AuthzSVNAccessFile "/export/home/svn-test/repository/my.authz"
    Order allow,deny
    Allow from all
  </Directory>
</Location>
</VirtualHost>
=== 8< ===
The configuration is working so far. Not working is that the authenticated user got no access denied when he wants accessing folders in projects whats not in the authz. The truss command also told me that no one access the /export/home/svn-test/repository/my.authz file.

I am very thankful for your support.
Thanks
Daniel

Re: authz File ignored?

Posted by Daniel Rindt <dr...@visetics.com>.
Am Mittwoch, den 01.09.2010, 12:20 +0400 schrieb Konstantin Kolinko:
> thus accessing from any IP address is sufficient to satisfy the
> checks. Thus, no need to validate the user.
> 
> http://httpd.apache.org/docs/2.2/mod/core.html#satisfy
> 
> Use Satisfy All  instead. 
The problem is still persisting. I have here again the vhost:
=== 8< ===
<VirtualHost svn-repository.intern.********.de:1234>
  DocumentRoot /export/home/svn-test/repository
  ServerName svn-repository.intern.********.de
<Location /svn>
  AuthName "ZVD-Wiki"
  AuthType NTLM
  NTLMAuth on
  NTLMAuthoritative off
  NTLMDomain ZDF_MAINZ
  NTLMServer bmaiz-dcmz01
  NTLMBackup bmaiz-dcmz05
  NTLMBasicAuth on
  Require valid-user
  Options +Indexes
 
  DAV svn
  SVNParentPath /export/home/svn-test/repository
  AuthzSVNAccessFile "/export/home/svn-test/repository/my.authz"

  Order allow,deny
  Allow from all
</Location>
</VirtualHost> 
=== 8< ===

I read the docs and got not really clued about the problem. Maybe there
are issues in the usage of the modules?

many TIA for your support
Daniel

Re: authz File ignored?

Posted by Konstantin Kolinko <kn...@gmail.com>.
Hi!

You are using

>    Satisfy Any

and

>    Order allow,deny
>    Allow from all

thus accessing from any IP address is sufficient to satisfy the
checks. Thus, no need to validate the user.

http://httpd.apache.org/docs/2.2/mod/core.html#satisfy

Use Satisfy All  instead.

Best regards,
Konstantin Kolinko

2010/9/1  <dr...@visetics.de>:
> Hello,
>
> i am using SVN via mod_dav_svn in apache. The user authentification is processed via NTLM. Later wehen the user is authenticated, i would like to have a authz file what ensures, that the person is permitted to access the svn repository and path. The configuration:
> (...)
> The configuration is working so far. Not working is that the authenticated user got no access denied when he wants accessing folders in projects whats not in the authz. The truss command also told me that no one access the /export/home/svn-test/repository/my.authz file.
>
> I am very thankful for your support.
> Thanks
> Daniel
>
>