You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Jehan PROCACCIA <Je...@int-evry.fr> on 2006/10/09 10:36:26 UTC

Access control authz + ssh + ldap

hello

I want to get a fine grained acces control over projects in the 
repositories. I 've seen that the authz_svn_module
could be used to do that. Here's how I used it

<Location /svn/s2ia>
   DAV svn
   SVNParentPath /var/www/svn
   AuthzSVNAccessFile /var/www/svn/s2ia/conf/authz
</Location>

Now when I access my repository I get :
<C:error/> <m:human-readable errcode="2"> Could not open the requested 
SVN filesystem </m:human-readable>
httpd runs as apache user and apache:apache owns all the directory tree 
below /var/www/snv !
Here's what I've set in my /var/www/svn/s2ia/conf/authz file
[/]
* = r
[/progs]
procacci = rw
tutu =
what's wrong

More generally , is it possible to get ride of authz and taking care of 
access controls with simple Unix filesystem modes (rwx ...) ?
In fact I don't understand How I can combine DAV access controled by 
(authz_svn_module) and svn+ssh command line clients ? will they also be 
restricted by the same conf/authz file ?
Actually all my users are already in a ldap directory and I would like 
to manage access control without recreating groups and have a single 
access control mechanism over DAV clients and ssh clients !.

Any simple howtos on that subject ?

thanks.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org