can't set up access control for networked repositories

[Zack Brown <zb...@tumblerings.org>]

Hi folks,

I've networked a couple repositories, but have not been able to include
access control. All my changes are made as 'anonymous', and no password
is requested.

I have the following in my dav_svn.conf file:

---------------------------
<Location /svn/jennie>
  DAV svn
  SVNPath /home/zbrown/site/writing/svn/jennie

  AuthType Basic
  AuthName "Subversion Repository"
  AuthUserFile /home/zbrown/site/writing/svn.passwd
</Location>
---------------------------

The www-data user owns the jennie directory, and I'm able to check out
the networked repository. The svn.passwd file exists and is also owned by
www-data. I've restarted apache2 several times, with no help. I'm using the
Debian Sid Subversion package.

Any ideas?

Thanks,
Zack

-- 
Zack Brown

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org

Re: can't set up access control for networked repositories

["Andreas J. Koenig" <an...@anima.de>]

>>>>> On Fri, 8 Nov 2002 00:15:06 -0800, Zack Brown <zb...@tumblerings.org> said:

  > Any ideas?

Require valid-user

-- 
andreas

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org

Re: can't set up access control for networked repositories

[Ben Collins-Sussman <su...@collab.net>]

Zack Brown <zb...@tumblerings.org> writes:


> ---------------------------
> <Location /svn/jennie>
>   DAV svn
>   SVNPath /home/zbrown/site/writing/svn/jennie
> 
>   AuthType Basic
>   AuthName "Subversion Repository"
>   AuthUserFile /home/zbrown/site/writing/svn.passwd
> </Location>
> ---------------------------

Right.  As Andreas said, you need "Require valid-user."  Your setup
above leaves your repository totally unauthenticated.  In other words,
Apache gets http requests to access the repository, but it has no idea
*who* is making the requests, so it just assumes they're all from an
'anonymous' user.  If you follow the suggestions in INSTALL and in the
Book, you can force Apache to demand basic authentication on every
request.  From there on, it's all a matter of how you want to "loosen"
up this requirement.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org