You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Daniel Anderson <ds...@yahoo.com> on 2004/12/06 22:14:47 UTC
another apache permissions problem
I'm a complete svn newbie trying to setup access to a new repository
through Apache. Everything works just fine when I try to access the
repository via the file:// protocol, but I can't seem to get it to work
with Apache. When I try to connect to the svn repository via http, I
get this error:
svn: PROPFIND request failed on '/MyProject'
svn:
Could not open the requested SVN filesystem
... or through a browser:
<m:human-readable errcode="13">
Could not open the requested SVN filesystem
</m:human-readable>
The Apache error log shows the following:
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] (20014)Error
string not specified yet: Can't open file
'/data/svn/services/customers/MyProject/format'
: Permission denied
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
fetch resource information. [500, #0]
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
open the requested SVN filesystem [500, #13]
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
open the requested SVN filesystem [500, #13]
The error doesn't make any sense to me because I set global write
permissions on the project directory in an attempt to ge this to work.
ls -l on the project direcory:
total 56
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 conf
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 dav
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:24 db
-rwxrwxrwx 1 root mygroup 2 Dec 6 15:18 format
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 hooks
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 locks
-rwxrwxrwx 1 root mygroup 379 Dec 6 15:18 README.txt
This is my http.conf entry (again, no permissions):
<Location /MyProject>
DAV svn
SVNPath /data/svn/services/customers/MyProject
</Location>
If anyone has an idea as to what the problem is, please let me know.
Thanks.
Re: another apache permissions problem
Posted by kf...@collab.net.
"Henrik Vendelbo" <hv...@bluprints.com> writes:
> Surely the directory he ran the ls on is his newly created repository. I
> have exactly the same issue, where permissions appear to be fine, but still
> we get a permission denied error.
Oh, I know it is his newly created repository; what I want to see is
its absolute path, to compare that against the httpd.conf file. I'm
not saying this will lead to a solution, but I have gradually learned
to always get a *completely* unambiguous bug report with transcripts
and facts -- as opposed to prose descriptions -- first. Obviously, if
a solution were jumping out at me, I wouldn't wait for more data, I'd
just say it. But I haven't been able to figure out what this is, so
I'm trying to gather all the hard data I can.
(There isn't an NFS mount or other form of remote mount anywhere in
the path to your repository, is there?)
-Karl
> ----- Original Message -----
> From: <kf...@collab.net>
> To: "Henrik Vendelbo" <hv...@bluprints.com>
> Cc: <us...@subversion.tigris.org>
> Sent: Monday, December 06, 2004 11:22 PM
> Subject: Re: another apache permissions problem
>
>
> > "Henrik Vendelbo" <hv...@bluprints.com> writes:
> > > my repository directory has,
> > > $ ls -dl /var/sourcecode/dspc
> > > drwxrwsr-t 7 apache svn 4096
> > >
> > > all else is similar
> > >
> > > placing the repository in the /var/www directory seems like an odd
> > > requirement, and didnt solve my problem anyway.
> >
> > The reason I want to know for Daniel's system is that we know the
> > SVNPath he used in his httpd.conf, but we don't know what directory he
> > ran 'ls' on.
> >
> > -Karl
> >
> >
> > > ----- Original Message -----
> > > From: <kf...@collab.net>
> > > To: "Henrik Vendelbo" <hv...@bluprints.com>
> > > Cc: <us...@subversion.tigris.org>
> > > Sent: Monday, December 06, 2004 10:54 PM
> > > Subject: Re: another apache permissions problem
> > >
> > >
> > > > > The error doesn't make any sense to me because I set global write
> > > > > permissions on the project directory in an attempt to ge this to
> work.
> > > > > ls -l on the project direcory:
> > > > >
> > > > > total 56
> > > > > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 conf
> > > > > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 dav
> > > > > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:24 db
> > > > > -rwxrwxrwx 1 root mygroup 2 Dec 6 15:18 format
> > > > > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 hooks
> > > > > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 locks
> > > > > -rwxrwxrwx 1 root mygroup 379 Dec 6 15:18 README.txt
> > > >
> > > > Daniel, was this the result of
> > > >
> > > > $ ls -l /data/svn/services/customers/MyProject
> > > >
> > > > ?
> > > >
> > > > -Karl
> > > >
> > > > > This is my http.conf entry (again, no permissions):
> > > > >
> > > > > <Location /MyProject>
> > > > > DAV svn
> > > > > SVNPath /data/svn/services/customers/MyProject
> > > > > </Location>
> > > > >
> > > > > If anyone has an idea as to what the problem is, please let me know.
> > > > >
> > > > > Thanks.
> > > > >
> > > > >
> > > > >
> > > >
> > ---------------------------------------------------------------------
> > > > > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > > > > For additional commands, e-mail: users-help@subversion.tigris.org
> > > >
> > > > ---------------------------------------------------------------------
> > > > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > > > For additional commands, e-mail: users-help@subversion.tigris.org
> > > >
> > > >
> > > >
> > > >
> >
> >
> >
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: another apache permissions problem
Posted by Henrik Vendelbo <hv...@bluprints.com>.
Surely the directory he ran the ls on is his newly created repository. I
have exactly the same issue, where permissions appear to be fine, but still
we get a permission denied error.
----- Original Message -----
From: <kf...@collab.net>
To: "Henrik Vendelbo" <hv...@bluprints.com>
Cc: <us...@subversion.tigris.org>
Sent: Monday, December 06, 2004 11:22 PM
Subject: Re: another apache permissions problem
> "Henrik Vendelbo" <hv...@bluprints.com> writes:
> > my repository directory has,
> > $ ls -dl /var/sourcecode/dspc
> > drwxrwsr-t 7 apache svn 4096
> >
> > all else is similar
> >
> > placing the repository in the /var/www directory seems like an odd
> > requirement, and didnt solve my problem anyway.
>
> The reason I want to know for Daniel's system is that we know the
> SVNPath he used in his httpd.conf, but we don't know what directory he
> ran 'ls' on.
>
> -Karl
>
>
> > ----- Original Message -----
> > From: <kf...@collab.net>
> > To: "Henrik Vendelbo" <hv...@bluprints.com>
> > Cc: <us...@subversion.tigris.org>
> > Sent: Monday, December 06, 2004 10:54 PM
> > Subject: Re: another apache permissions problem
> >
> >
> > > > The error doesn't make any sense to me because I set global write
> > > > permissions on the project directory in an attempt to ge this to
work.
> > > > ls -l on the project direcory:
> > > >
> > > > total 56
> > > > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 conf
> > > > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 dav
> > > > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:24 db
> > > > -rwxrwxrwx 1 root mygroup 2 Dec 6 15:18 format
> > > > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 hooks
> > > > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 locks
> > > > -rwxrwxrwx 1 root mygroup 379 Dec 6 15:18 README.txt
> > >
> > > Daniel, was this the result of
> > >
> > > $ ls -l /data/svn/services/customers/MyProject
> > >
> > > ?
> > >
> > > -Karl
> > >
> > > > This is my http.conf entry (again, no permissions):
> > > >
> > > > <Location /MyProject>
> > > > DAV svn
> > > > SVNPath /data/svn/services/customers/MyProject
> > > > </Location>
> > > >
> > > > If anyone has an idea as to what the problem is, please let me know.
> > > >
> > > > Thanks.
> > > >
> > > >
> > > >
> > >
> ---------------------------------------------------------------------
> > > > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > > > For additional commands, e-mail: users-help@subversion.tigris.org
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > > For additional commands, e-mail: users-help@subversion.tigris.org
> > >
> > >
> > >
> > >
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: another apache permissions problem
Posted by kf...@collab.net.
"Henrik Vendelbo" <hv...@bluprints.com> writes:
> my repository directory has,
> $ ls -dl /var/sourcecode/dspc
> drwxrwsr-t 7 apache svn 4096
>
> all else is similar
>
> placing the repository in the /var/www directory seems like an odd
> requirement, and didnt solve my problem anyway.
The reason I want to know for Daniel's system is that we know the
SVNPath he used in his httpd.conf, but we don't know what directory he
ran 'ls' on.
-Karl
> ----- Original Message -----
> From: <kf...@collab.net>
> To: "Henrik Vendelbo" <hv...@bluprints.com>
> Cc: <us...@subversion.tigris.org>
> Sent: Monday, December 06, 2004 10:54 PM
> Subject: Re: another apache permissions problem
>
>
> > > The error doesn't make any sense to me because I set global write
> > > permissions on the project directory in an attempt to ge this to work.
> > > ls -l on the project direcory:
> > >
> > > total 56
> > > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 conf
> > > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 dav
> > > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:24 db
> > > -rwxrwxrwx 1 root mygroup 2 Dec 6 15:18 format
> > > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 hooks
> > > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 locks
> > > -rwxrwxrwx 1 root mygroup 379 Dec 6 15:18 README.txt
> >
> > Daniel, was this the result of
> >
> > $ ls -l /data/svn/services/customers/MyProject
> >
> > ?
> >
> > -Karl
> >
> > > This is my http.conf entry (again, no permissions):
> > >
> > > <Location /MyProject>
> > > DAV svn
> > > SVNPath /data/svn/services/customers/MyProject
> > > </Location>
> > >
> > > If anyone has an idea as to what the problem is, please let me know.
> > >
> > > Thanks.
> > >
> > >
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > > For additional commands, e-mail: users-help@subversion.tigris.org
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > For additional commands, e-mail: users-help@subversion.tigris.org
> >
> >
> >
> >
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: another apache permissions problem
Posted by Henrik Vendelbo <hv...@bluprints.com>.
my repository directory has,
$ ls -dl /var/sourcecode/dspc
drwxrwsr-t 7 apache svn 4096
all else is similar
placing the repository in the /var/www directory seems like an odd
requirement, and didnt solve my problem anyway.
----- Original Message -----
From: <kf...@collab.net>
To: "Henrik Vendelbo" <hv...@bluprints.com>
Cc: <us...@subversion.tigris.org>
Sent: Monday, December 06, 2004 10:54 PM
Subject: Re: another apache permissions problem
> > The error doesn't make any sense to me because I set global write
> > permissions on the project directory in an attempt to ge this to work.
> > ls -l on the project direcory:
> >
> > total 56
> > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 conf
> > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 dav
> > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:24 db
> > -rwxrwxrwx 1 root mygroup 2 Dec 6 15:18 format
> > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 hooks
> > drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 locks
> > -rwxrwxrwx 1 root mygroup 379 Dec 6 15:18 README.txt
>
> Daniel, was this the result of
>
> $ ls -l /data/svn/services/customers/MyProject
>
> ?
>
> -Karl
>
> > This is my http.conf entry (again, no permissions):
> >
> > <Location /MyProject>
> > DAV svn
> > SVNPath /data/svn/services/customers/MyProject
> > </Location>
> >
> > If anyone has an idea as to what the problem is, please let me know.
> >
> > Thanks.
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > For additional commands, e-mail: users-help@subversion.tigris.org
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: another apache permissions problem
Posted by kf...@collab.net.
> The error doesn't make any sense to me because I set global write
> permissions on the project directory in an attempt to ge this to work.
> ls -l on the project direcory:
>
> total 56
> drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 conf
> drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 dav
> drwxrwxrwx 2 root mygroup 4096 Dec 6 15:24 db
> -rwxrwxrwx 1 root mygroup 2 Dec 6 15:18 format
> drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 hooks
> drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 locks
> -rwxrwxrwx 1 root mygroup 379 Dec 6 15:18 README.txt
Daniel, was this the result of
$ ls -l /data/svn/services/customers/MyProject
?
-Karl
> This is my http.conf entry (again, no permissions):
>
> <Location /MyProject>
> DAV svn
> SVNPath /data/svn/services/customers/MyProject
> </Location>
>
> If anyone has an idea as to what the problem is, please let me know.
>
> Thanks.
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: another apache permissions problem
Posted by Henrik Vendelbo <hv...@bluprints.com>.
That is exactly the problem I am stuck with, but apparently nobody knows how
to fix the issue.
----- Original Message -----
From: Daniel Anderson
To: users@subversion.tigris.org
Sent: Monday, December 06, 2004 10:14 PM
Subject: another apache permissions problem
I'm a complete svn newbie trying to setup access to a new repository through
Apache. Everything works just fine when I try to access the repository via
the file:// protocol, but I can't seem to get it to work with Apache. When
I try to connect to the svn repository via http, I get this error:
svn: PROPFIND request failed on '/MyProject'
svn:
Could not open the requested SVN filesystem
... or through a browser:
<m:human-readable errcode="13">
Could not open the requested SVN filesystem
</m:human-readable>
The Apache error log shows the following:
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] (20014)Error
string not specified yet: Can't open file
'/data/svn/services/customers/MyProject/format'
: Permission denied
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not fetch
resource information. [500, #0]
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not open
the requested SVN filesystem [500, #13]
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not open
the requested SVN filesystem [500, #13]
The error doesn't make any sense to me because I set global write
permissions on the project directory in an attempt to ge this to work.
ls -l on the project direcory:
total 56
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 conf
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 dav
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:24 db
-rwxrwxrwx 1 root mygroup 2 Dec 6 15:18 format
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 hooks
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 locks
-rwxrwxrwx 1 root mygroup 379 Dec 6 15:18 README.txt
This is my http.conf entry (again, no permissions):
<Location /MyProject>
DAV svn
SVNPath /data/svn/services/customers/MyProject
</Location>
If anyone has an idea as to what the problem is, please let me know.
Thanks.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: OPTIONS error
Posted by Don Vawter <do...@vawter.com>.
It turns out it was an error in my proxy configuration for apache. It
was routing svn requests to Tomcat so it was not a subversion issue at all.
kfogel@collab.net wrote:
>Don Vawter <do...@vawter.com> writes:
>
>
>>Any idea what file this is reading and why it would happen.
>>
>>$ svn commit -m'misc updates'
>>svn: Commit failed (details follow):
>>svn: OPTIONS request failed on
>>'/svn/common/trunk/common/src/java/packages/com/vawter/common'
>>svn: The OPTIONS request returned invalid XML in the response: XML
>>parse error at line 1: Extra content at the end of the document
>>. (/svn/common/trunk/common/src/java/packages/com/vawter/common)
>>
>>
>
>Please see http://svn.collab.net/repos/svn/trunk/BUGS.
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: OPTIONS error
Posted by kf...@collab.net.
Don Vawter <do...@vawter.com> writes:
> Any idea what file this is reading and why it would happen.
>
> $ svn commit -m'misc updates'
> svn: Commit failed (details follow):
> svn: OPTIONS request failed on
> '/svn/common/trunk/common/src/java/packages/com/vawter/common'
> svn: The OPTIONS request returned invalid XML in the response: XML
> parse error at line 1: Extra content at the end of the document
> . (/svn/common/trunk/common/src/java/packages/com/vawter/common)
Please see http://svn.collab.net/repos/svn/trunk/BUGS.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
OPTIONS error
Posted by Don Vawter <do...@vawter.com>.
Any idea what file this is reading and why it would happen.
$ svn commit -m'misc updates'
svn: Commit failed (details follow):
svn: OPTIONS request failed on
'/svn/common/trunk/common/src/java/packages/com/vawter/common'
svn: The OPTIONS request returned invalid XML in the response: XML parse
error at line 1: Extra content at the end of the document
. (/svn/common/trunk/common/src/java/packages/com/vawter/common)
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
apache permissions problem, solution
Posted by Henrik Vendelbo <hv...@bluprints.com>.
Disabling selinux is of course an option if you are using it locally, but I
intend to have accessable over the internet, so I really want the best
security I can get.
I found a terrific tutorial at
http://fedora.redhat.com/docs/selinux-apache-fc3/
And quickly managed to change the directory security context for the
repository using the chcon tool.
Boy, I'm a happy camper today :)
----- Original Message -----
From: "Sean Laurent" <se...@neuronfarm.com>
To: <us...@subversion.tigris.org>
Cc: "Henrik Vendelbo" <hv...@bluprints.com>; "Daniel Anderson"
<ds...@yahoo.com>; "Gary Thomas" <ga...@mlbassoc.com>
Sent: Tuesday, December 07, 2004 6:12 PM
Subject: Re: another apache permissions problem
I believe you're thinking of SELinux (Security-Enhanced Linux):
"Security-enhanced Linux (SELinux)is a patch of the Linux® kernel and a
number
of utilities with enhanced security functionality designed to add mandatory
access controls to Linux."
http://fedora.redhat.com/projects/selinux/
-Sean
On Tuesday 07 December 2004 11:57 am, Henrik Vendelbo wrote:
> hmm or was it suexec, I remember it being mentioned during install as a
> further security enhancement
> ----- Original Message -----
> From: Daniel Anderson
> To: users@subversion.tigris.org
> Cc: Gary Thomas ; hvendelbo@bluprints.com
> Sent: Tuesday, December 07, 2004 5:25 PM
> Subject: Re: another apache permissions problem
>
> Daniel Anderson wrote:
> Gary Thomas wrote:
> On Mon, 2004-12-06 at 15:14, Daniel Anderson wrote:
> I'm a complete svn newbie trying to setup access to a new repository
> through Apache. Everything works just fine when I try to access the
> repository via the file:// protocol, but I can't seem to get it to
> work with Apache. When I try to connect to the svn repository via
> http, I get this error:
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: another apache permissions problem
Posted by Sean Laurent <se...@neuronfarm.com>.
I believe you're thinking of SELinux (Security-Enhanced Linux):
"Security-enhanced Linux (SELinux)is a patch of the Linux® kernel and a number
of utilities with enhanced security functionality designed to add mandatory
access controls to Linux."
http://fedora.redhat.com/projects/selinux/
-Sean
On Tuesday 07 December 2004 11:57 am, Henrik Vendelbo wrote:
> hmm or was it suexec, I remember it being mentioned during install as a
> further security enhancement
> ----- Original Message -----
> From: Daniel Anderson
> To: users@subversion.tigris.org
> Cc: Gary Thomas ; hvendelbo@bluprints.com
> Sent: Tuesday, December 07, 2004 5:25 PM
> Subject: Re: another apache permissions problem
>
> Daniel Anderson wrote:
> Gary Thomas wrote:
> On Mon, 2004-12-06 at 15:14, Daniel Anderson wrote:
> I'm a complete svn newbie trying to setup access to a new repository
> through Apache. Everything works just fine when I try to access the
> repository via the file:// protocol, but I can't seem to get it to
> work with Apache. When I try to connect to the svn repository via
> http, I get this error:
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: another apache permissions problem
Posted by Henrik Vendelbo <hv...@bluprints.com>.
hmm or was it suexec, I remember it being mentioned during install as a further security enhancement
----- Original Message -----
From: Daniel Anderson
To: users@subversion.tigris.org
Cc: Gary Thomas ; hvendelbo@bluprints.com
Sent: Tuesday, December 07, 2004 5:25 PM
Subject: Re: another apache permissions problem
Daniel Anderson wrote:
Gary Thomas wrote:
On Mon, 2004-12-06 at 15:14, Daniel Anderson wrote:
I'm a complete svn newbie trying to setup access to a new repository
through Apache. Everything works just fine when I try to access the
repository via the file:// protocol, but I can't seem to get it to
work with Apache. When I try to connect to the svn repository via
http, I get this error:
svn: PROPFIND request failed on '/MyProject'
svn:
Could not open the requested SVN filesystem
... or through a browser:
<m:human-readable errcode="13">
Could not open the requested SVN filesystem
</m:human-readable>
The Apache error log shows the following:
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119]
(20014)Error string not specified yet: Can't open file
'/data/svn/services/customers/MyProject/format'
: Permission denied
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
fetch resource information. [500, #0]
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
open the requested SVN filesystem [500, #13]
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
open the requested SVN filesystem [500, #13]
The error doesn't make any sense to me because I set global write
permissions on the project directory in an attempt to ge this to
work. ls -l on the project direcory:
total 56
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 conf
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 dav
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:24 db
-rwxrwxrwx 1 root mygroup 2 Dec 6 15:18 format
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 hooks
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 locks
-rwxrwxrwx 1 root mygroup 379 Dec 6 15:18 README.txt
This is my http.conf entry (again, no permissions):
<Location /MyProject>
DAV svn
SVNPath /data/svn/services/customers/MyProject
</Location>
If anyone has an idea as to what the problem is, please let me know.
When I set this up, I found that I needed the SVN repository within
my HTTP tree - I had some troubles when the repository was outside of
it(*). There may be a way to change that, but I'm happy with it working
this way. I also run virtual servers, so I have my <Location>
directives nested within one of those. Mine looks [sort of] like this:
<Location /SVN>
DAV svn
SVNParentPath /var/www/SVN/
AuthzSVNAccessFile /var/www/SVN/.authz
AuthUserFile /var/www/SVN/.htpasswd
AuthName "Subversion Repository Access"
AuthType Basic
require valid-user
</Location>
This works great for me - I actually have multiple repositories under
the /SVN umbrella. Access to the repositories is then
http://MY_SERVER/SVN/xyz
(*) IIRC the trouble I had was that ViewCVS didn't like things that
were outside of the tree.
Following your suggestion, I tried to setup a repository within the /var/www/ tree. It worked fine. Unfortunately I need the repository outside the /var/www tree. The problem seems to be with Apache, but I can't figure it out for the life of me. I can't even get Apache to serve ANY html or text page outside of the /var/www/html tree. I have tried using symbolic links and by specifying an alias and directory as follows...
Alias /foo "/foo"
<Directory "/foo">
Options FollowSymLinks Indexes
Order allow,deny
Allow from all
</Directory>
I can get Apache to show a directory listing, but no files show up except nested directories. When I try to access a file (e.g. test.txt) in this directory via a url, the following error is written to the error log...
(13)Permission denied: access to /foo/test.txt denied
I have tried everything in terms of permissions and ownership on the files and directories. I am by no means knowledgable of Apache configuration, but I have never had any trouble setting up directories like this. It seems like a pretty basic task. I just can't figure this out.
I am running Apache/2.0.52 (Fedora). Is there something new to this version or unique to Fedora that I am missing? This is driving me crazy.
Any help would be greatly appreciated.
I *finally* figured this out. Hopefully this will help prevent someone else from wasting countless hours trying to figure it out. The SELinux security was somehow interfering with Apache. I don't understand the specifics, but when I shut down the SELinux, everything began to work as expected.
Re: another apache permissions problem
Posted by kf...@collab.net.
Daniel Anderson <ds...@yahoo.com> writes:
> I am using Fedora core 3 as well. For me it is called "SELinux".
> That's what I turned off to get everything to work just fine. It can
> be easily shut off through the "Security Level" UI within the default
> "System Tools" group.
Note that http://subversion.tigris.org/project_faq.html#reposperms
talks about this now.
Best,
-Karl
> Henrik Vendelbo wrote:
>
> > Would sulinux be involved in this security issue ? it is enabled for
> > apache in fedora core 3
> >
> > ----- Original Message -----
> > *From:* Daniel Anderson <ma...@yahoo.com>
> > *To:* users@subversion.tigris.org
> > <ma...@subversion.tigris.org>
> > *Cc:* Gary Thomas <ma...@mlbassoc.com> ;
> > hvendelbo@bluprints.com <ma...@bluprints.com>
> > *Sent:* Tuesday, December 07, 2004 5:25 PM
> > *Subject:* Re: another apache permissions problem
> >
> >
> >
> > Daniel Anderson wrote:
> >
> >>
> >>
> >> Gary Thomas wrote:
> >>
> >>>On Mon, 2004-12-06 at 15:14, Daniel Anderson wrote:
> >>>
> >>>>I'm a complete svn newbie trying to setup access to a new repository
> >>>>through Apache. Everything works just fine when I try to access the
> >>>>repository via the file:// protocol, but I can't seem to get it to
> >>>>work with Apache. When I try to connect to the svn repository via
> >>>>http, I get this error:
> >>>>
> >>>>svn: PROPFIND request failed on '/MyProject'
> >>>>svn:
> >>>>Could not open the requested SVN filesystem
> >>>>
> >>>> ... or through a browser: <m:human-readable errcode="13">
> >>>>Could not open the requested SVN filesystem
> >>>></m:human-readable>
> >>>>
> >>>>The Apache error log shows the following:
> >>>>
> >>>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119]
> >>>>(20014)Error string not specified yet: Can't open file
> >>>>'/data/svn/services/customers/MyProject/format'
> >>>>: Permission denied
> >>>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
> >>>>fetch resource information. [500, #0]
> >>>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
> >>>>open the requested SVN filesystem [500, #13]
> >>>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
> >>>>open the requested SVN filesystem [500, #13]
> >>>>
> >>>>
> >>>>The error doesn't make any sense to me because I set global write
> >>>>permissions on the project directory in an attempt to ge this to
> >>>>work. ls -l on the project direcory:
> >>>>
> >>>>total 56
> >>>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 conf
> >>>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 dav
> >>>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:24 db
> >>>>-rwxrwxrwx 1 root mygroup 2 Dec 6 15:18 format
> >>>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 hooks
> >>>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 locks
> >>>>-rwxrwxrwx 1 root mygroup 379 Dec 6 15:18 README.txt
> >>>>
> >>>>This is my http.conf entry (again, no permissions):
> >>>>
> >>>><Location /MyProject>
> >>>> DAV svn
> >>>> SVNPath /data/svn/services/customers/MyProject
> >>>></Location>
> >>>>
> >>>>If anyone has an idea as to what the problem is, please let me know.
> >>>>
> >>>
> >>>When I set this up, I found that I needed the SVN repository within
> >>> my HTTP tree - I had some troubles when the repository was outside
> >>> of it(*). There may be a way to change that, but I'm happy with
> >>> it working
> >>> this way. I also run virtual servers, so I have my <Location>
> >>> directives nested within one of those. Mine looks [sort of] like
> >>> this:
> >>> <Location /SVN>
> >>> DAV svn
> >>> SVNParentPath /var/www/SVN/
> >>> AuthzSVNAccessFile /var/www/SVN/.authz
> >>> AuthUserFile /var/www/SVN/.htpasswd
> >>> AuthName "Subversion Repository Access"
> >>> AuthType Basic
> >>> require valid-user
> >>> </Location>
> >>>
> >>>This works great for me - I actually have multiple repositories under
> >>>the /SVN umbrella. Access to the repositories is then
> >>> http://MY_SERVER/SVN/xyz
> >>>
> >>>(*) IIRC the trouble I had was that ViewCVS didn't like things that
> >>>were outside of the tree.
> >>>
> >>>
> >> Following your suggestion, I tried to setup a repository within
> >> the /var/www/ tree. It worked fine. Unfortunately I need the
> >> repository outside the /var/www tree. The problem seems to be
> >> with Apache, but I can't figure it out for the life of me. I
> >> can't even get Apache to serve ANY html or text page outside of
> >> the /var/www/html tree. I have tried using symbolic links and by
> >> specifying an alias and directory as follows...
> >>
> >> Alias /foo "/foo"
> >>
> >> <Directory "/foo">
> >> Options FollowSymLinks Indexes
> >> Order allow,deny
> >> Allow from all
> >> </Directory>
> >>
> >> I can get Apache to show a directory listing, but no files show
> >> up except nested directories. When I try to access a file (e.g.
> >> test.txt) in this directory via a url, the following error is
> >> written to the error log...
> >>
> >> (13)Permission denied: access to /foo/test.txt denied
> >>
> >> I have tried everything in terms of permissions and ownership on
> >> the files and directories. I am by no means knowledgable of
> >> Apache configuration, but I have never had any trouble setting up
> >> directories like this. It seems like a pretty basic task. I
> >> just can't figure this out.
> >>
> >> I am running Apache/2.0.52 (Fedora). Is there something new to
> >> this version or unique to Fedora that I am missing? This is
> >> driving me crazy.
> >>
> >> Any help would be greatly appreciated.
> >>
> >>
> >>
> > I *finally* figured this out. Hopefully this will help prevent
> > someone else from wasting countless hours trying to figure it
> > out. The SELinux security was somehow interfering with Apache. I
> > don't understand the specifics, but when I shut down the SELinux,
> > everything began to work as expected.
> >
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: another apache permissions problem
Posted by Daniel Anderson <ds...@yahoo.com>.
I am using Fedora core 3 as well. For me it is called "SELinux".
That's what I turned off to get everything to work just fine. It can be
easily shut off through the "Security Level" UI within the default
"System Tools" group.
Henrik Vendelbo wrote:
> Would sulinux be involved in this security issue ? it is enabled for
> apache in fedora core 3
>
> ----- Original Message -----
> *From:* Daniel Anderson <ma...@yahoo.com>
> *To:* users@subversion.tigris.org
> <ma...@subversion.tigris.org>
> *Cc:* Gary Thomas <ma...@mlbassoc.com> ;
> hvendelbo@bluprints.com <ma...@bluprints.com>
> *Sent:* Tuesday, December 07, 2004 5:25 PM
> *Subject:* Re: another apache permissions problem
>
>
>
> Daniel Anderson wrote:
>
>>
>>
>> Gary Thomas wrote:
>>
>>>On Mon, 2004-12-06 at 15:14, Daniel Anderson wrote:
>>>
>>>
>>>>I'm a complete svn newbie trying to setup access to a new repository
>>>>through Apache. Everything works just fine when I try to access the
>>>>repository via the file:// protocol, but I can't seem to get it to
>>>>work with Apache. When I try to connect to the svn repository via
>>>>http, I get this error:
>>>>
>>>>svn: PROPFIND request failed on '/MyProject'
>>>>svn:
>>>>Could not open the requested SVN filesystem
>>>>
>>>>... or through a browser:
>>>>
>>>><m:human-readable errcode="13">
>>>>Could not open the requested SVN filesystem
>>>></m:human-readable>
>>>>
>>>>The Apache error log shows the following:
>>>>
>>>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119]
>>>>(20014)Error string not specified yet: Can't open file
>>>>'/data/svn/services/customers/MyProject/format'
>>>>: Permission denied
>>>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
>>>>fetch resource information. [500, #0]
>>>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
>>>>open the requested SVN filesystem [500, #13]
>>>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
>>>>open the requested SVN filesystem [500, #13]
>>>>
>>>>
>>>>The error doesn't make any sense to me because I set global write
>>>>permissions on the project directory in an attempt to ge this to
>>>>work. ls -l on the project direcory:
>>>>
>>>>total 56
>>>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 conf
>>>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 dav
>>>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:24 db
>>>>-rwxrwxrwx 1 root mygroup 2 Dec 6 15:18 format
>>>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 hooks
>>>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 locks
>>>>-rwxrwxrwx 1 root mygroup 379 Dec 6 15:18 README.txt
>>>>
>>>>This is my http.conf entry (again, no permissions):
>>>>
>>>><Location /MyProject>
>>>> DAV svn
>>>> SVNPath /data/svn/services/customers/MyProject
>>>></Location>
>>>>
>>>>If anyone has an idea as to what the problem is, please let me know.
>>>>
>>>>
>>>
>>>When I set this up, I found that I needed the SVN repository within
>>>my HTTP tree - I had some troubles when the repository was outside of
>>>it(*). There may be a way to change that, but I'm happy with it working
>>>this way. I also run virtual servers, so I have my <Location>
>>>directives nested within one of those. Mine looks [sort of] like this:
>>> <Location /SVN>
>>> DAV svn
>>> SVNParentPath /var/www/SVN/
>>> AuthzSVNAccessFile /var/www/SVN/.authz
>>> AuthUserFile /var/www/SVN/.htpasswd
>>> AuthName "Subversion Repository Access"
>>> AuthType Basic
>>> require valid-user
>>> </Location>
>>>
>>>This works great for me - I actually have multiple repositories under
>>>the /SVN umbrella. Access to the repositories is then
>>> http://MY_SERVER/SVN/xyz
>>>
>>>(*) IIRC the trouble I had was that ViewCVS didn't like things that
>>>were outside of the tree.
>>>
>>>
>>>
>> Following your suggestion, I tried to setup a repository within
>> the /var/www/ tree. It worked fine. Unfortunately I need the
>> repository outside the /var/www tree. The problem seems to be
>> with Apache, but I can't figure it out for the life of me. I
>> can't even get Apache to serve ANY html or text page outside of
>> the /var/www/html tree. I have tried using symbolic links and by
>> specifying an alias and directory as follows...
>>
>> Alias /foo "/foo"
>>
>> <Directory "/foo">
>> Options FollowSymLinks Indexes
>> Order allow,deny
>> Allow from all
>> </Directory>
>>
>> I can get Apache to show a directory listing, but no files show
>> up except nested directories. When I try to access a file (e.g.
>> test.txt) in this directory via a url, the following error is
>> written to the error log...
>>
>> (13)Permission denied: access to /foo/test.txt denied
>>
>> I have tried everything in terms of permissions and ownership on
>> the files and directories. I am by no means knowledgable of
>> Apache configuration, but I have never had any trouble setting up
>> directories like this. It seems like a pretty basic task. I
>> just can't figure this out.
>>
>> I am running Apache/2.0.52 (Fedora). Is there something new to
>> this version or unique to Fedora that I am missing? This is
>> driving me crazy.
>>
>> Any help would be greatly appreciated.
>>
>>
>>
> I *finally* figured this out. Hopefully this will help prevent
> someone else from wasting countless hours trying to figure it
> out. The SELinux security was somehow interfering with Apache. I
> don't understand the specifics, but when I shut down the SELinux,
> everything began to work as expected.
>
Re: another apache permissions problem
Posted by Henrik Vendelbo <hv...@bluprints.com>.
Would sulinux be involved in this security issue ? it is enabled for apache in fedora core 3
----- Original Message -----
From: Daniel Anderson
To: users@subversion.tigris.org
Cc: Gary Thomas ; hvendelbo@bluprints.com
Sent: Tuesday, December 07, 2004 5:25 PM
Subject: Re: another apache permissions problem
Daniel Anderson wrote:
Gary Thomas wrote:
On Mon, 2004-12-06 at 15:14, Daniel Anderson wrote:
I'm a complete svn newbie trying to setup access to a new repository
through Apache. Everything works just fine when I try to access the
repository via the file:// protocol, but I can't seem to get it to
work with Apache. When I try to connect to the svn repository via
http, I get this error:
svn: PROPFIND request failed on '/MyProject'
svn:
Could not open the requested SVN filesystem
... or through a browser:
<m:human-readable errcode="13">
Could not open the requested SVN filesystem
</m:human-readable>
The Apache error log shows the following:
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119]
(20014)Error string not specified yet: Can't open file
'/data/svn/services/customers/MyProject/format'
: Permission denied
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
fetch resource information. [500, #0]
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
open the requested SVN filesystem [500, #13]
[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
open the requested SVN filesystem [500, #13]
The error doesn't make any sense to me because I set global write
permissions on the project directory in an attempt to ge this to
work. ls -l on the project direcory:
total 56
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 conf
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 dav
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:24 db
-rwxrwxrwx 1 root mygroup 2 Dec 6 15:18 format
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 hooks
drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 locks
-rwxrwxrwx 1 root mygroup 379 Dec 6 15:18 README.txt
This is my http.conf entry (again, no permissions):
<Location /MyProject>
DAV svn
SVNPath /data/svn/services/customers/MyProject
</Location>
If anyone has an idea as to what the problem is, please let me know.
When I set this up, I found that I needed the SVN repository within
my HTTP tree - I had some troubles when the repository was outside of
it(*). There may be a way to change that, but I'm happy with it working
this way. I also run virtual servers, so I have my <Location>
directives nested within one of those. Mine looks [sort of] like this:
<Location /SVN>
DAV svn
SVNParentPath /var/www/SVN/
AuthzSVNAccessFile /var/www/SVN/.authz
AuthUserFile /var/www/SVN/.htpasswd
AuthName "Subversion Repository Access"
AuthType Basic
require valid-user
</Location>
This works great for me - I actually have multiple repositories under
the /SVN umbrella. Access to the repositories is then
http://MY_SERVER/SVN/xyz
(*) IIRC the trouble I had was that ViewCVS didn't like things that
were outside of the tree.
Following your suggestion, I tried to setup a repository within the /var/www/ tree. It worked fine. Unfortunately I need the repository outside the /var/www tree. The problem seems to be with Apache, but I can't figure it out for the life of me. I can't even get Apache to serve ANY html or text page outside of the /var/www/html tree. I have tried using symbolic links and by specifying an alias and directory as follows...
Alias /foo "/foo"
<Directory "/foo">
Options FollowSymLinks Indexes
Order allow,deny
Allow from all
</Directory>
I can get Apache to show a directory listing, but no files show up except nested directories. When I try to access a file (e.g. test.txt) in this directory via a url, the following error is written to the error log...
(13)Permission denied: access to /foo/test.txt denied
I have tried everything in terms of permissions and ownership on the files and directories. I am by no means knowledgable of Apache configuration, but I have never had any trouble setting up directories like this. It seems like a pretty basic task. I just can't figure this out.
I am running Apache/2.0.52 (Fedora). Is there something new to this version or unique to Fedora that I am missing? This is driving me crazy.
Any help would be greatly appreciated.
I *finally* figured this out. Hopefully this will help prevent someone else from wasting countless hours trying to figure it out. The SELinux security was somehow interfering with Apache. I don't understand the specifics, but when I shut down the SELinux, everything began to work as expected.
Re: another apache permissions problem
Posted by Daniel Anderson <ds...@yahoo.com>.
Daniel Anderson wrote:
>
>
> Gary Thomas wrote:
>
>>On Mon, 2004-12-06 at 15:14, Daniel Anderson wrote:
>>
>>
>>>I'm a complete svn newbie trying to setup access to a new repository
>>>through Apache. Everything works just fine when I try to access the
>>>repository via the file:// protocol, but I can't seem to get it to
>>>work with Apache. When I try to connect to the svn repository via
>>>http, I get this error:
>>>
>>>svn: PROPFIND request failed on '/MyProject'
>>>svn:
>>>Could not open the requested SVN filesystem
>>>
>>>... or through a browser:
>>>
>>><m:human-readable errcode="13">
>>>Could not open the requested SVN filesystem
>>></m:human-readable>
>>>
>>>The Apache error log shows the following:
>>>
>>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119]
>>>(20014)Error string not specified yet: Can't open file
>>>'/data/svn/services/customers/MyProject/format'
>>>: Permission denied
>>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
>>>fetch resource information. [500, #0]
>>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
>>>open the requested SVN filesystem [500, #13]
>>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
>>>open the requested SVN filesystem [500, #13]
>>>
>>>
>>>The error doesn't make any sense to me because I set global write
>>>permissions on the project directory in an attempt to ge this to
>>>work. ls -l on the project direcory:
>>>
>>>total 56
>>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 conf
>>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 dav
>>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:24 db
>>>-rwxrwxrwx 1 root mygroup 2 Dec 6 15:18 format
>>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 hooks
>>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 locks
>>>-rwxrwxrwx 1 root mygroup 379 Dec 6 15:18 README.txt
>>>
>>>This is my http.conf entry (again, no permissions):
>>>
>>><Location /MyProject>
>>> DAV svn
>>> SVNPath /data/svn/services/customers/MyProject
>>></Location>
>>>
>>>If anyone has an idea as to what the problem is, please let me know.
>>>
>>>
>>
>>When I set this up, I found that I needed the SVN repository within
>>my HTTP tree - I had some troubles when the repository was outside of
>>it(*). There may be a way to change that, but I'm happy with it working
>>this way. I also run virtual servers, so I have my <Location>
>>directives nested within one of those. Mine looks [sort of] like this:
>> <Location /SVN>
>> DAV svn
>> SVNParentPath /var/www/SVN/
>> AuthzSVNAccessFile /var/www/SVN/.authz
>> AuthUserFile /var/www/SVN/.htpasswd
>> AuthName "Subversion Repository Access"
>> AuthType Basic
>> require valid-user
>> </Location>
>>
>>This works great for me - I actually have multiple repositories under
>>the /SVN umbrella. Access to the repositories is then
>> http://MY_SERVER/SVN/xyz
>>
>>(*) IIRC the trouble I had was that ViewCVS didn't like things that
>>were outside of the tree.
>>
>>
>>
> Following your suggestion, I tried to setup a repository within the
> /var/www/ tree. It worked fine. Unfortunately I need the repository
> outside the /var/www tree. The problem seems to be with Apache, but I
> can't figure it out for the life of me. I can't even get Apache to
> serve ANY html or text page outside of the /var/www/html tree. I have
> tried using symbolic links and by specifying an alias and directory as
> follows...
>
> Alias /foo "/foo"
>
> <Directory "/foo">
> Options FollowSymLinks Indexes
> Order allow,deny
> Allow from all
> </Directory>
>
> I can get Apache to show a directory listing, but no files show up
> except nested directories. When I try to access a file (e.g.
> test.txt) in this directory via a url, the following error is written
> to the error log...
>
> (13)Permission denied: access to /foo/test.txt denied
>
> I have tried everything in terms of permissions and ownership on the
> files and directories. I am by no means knowledgable of Apache
> configuration, but I have never had any trouble setting up directories
> like this. It seems like a pretty basic task. I just can't figure
> this out.
>
> I am running Apache/2.0.52 (Fedora). Is there something new to this
> version or unique to Fedora that I am missing? This is driving me crazy.
>
> Any help would be greatly appreciated.
>
>
>
I *finally* figured this out. Hopefully this will help prevent someone
else from wasting countless hours trying to figure it out. The SELinux
security was somehow interfering with Apache. I don't understand the
specifics, but when I shut down the SELinux, everything began to work as
expected.
Re: another apache permissions problem
Posted by Daniel Anderson <ds...@yahoo.com>.
Gary Thomas wrote:
>On Mon, 2004-12-06 at 15:14, Daniel Anderson wrote:
>
>
>>I'm a complete svn newbie trying to setup access to a new repository
>>through Apache. Everything works just fine when I try to access the
>>repository via the file:// protocol, but I can't seem to get it to
>>work with Apache. When I try to connect to the svn repository via
>>http, I get this error:
>>
>>svn: PROPFIND request failed on '/MyProject'
>>svn:
>>Could not open the requested SVN filesystem
>>
>>... or through a browser:
>>
>><m:human-readable errcode="13">
>>Could not open the requested SVN filesystem
>></m:human-readable>
>>
>>The Apache error log shows the following:
>>
>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119]
>>(20014)Error string not specified yet: Can't open file
>>'/data/svn/services/customers/MyProject/format'
>>: Permission denied
>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
>>fetch resource information. [500, #0]
>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
>>open the requested SVN filesystem [500, #13]
>>[Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
>>open the requested SVN filesystem [500, #13]
>>
>>
>>The error doesn't make any sense to me because I set global write
>>permissions on the project directory in an attempt to ge this to
>>work. ls -l on the project direcory:
>>
>>total 56
>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 conf
>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 dav
>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:24 db
>>-rwxrwxrwx 1 root mygroup 2 Dec 6 15:18 format
>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 hooks
>>drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 locks
>>-rwxrwxrwx 1 root mygroup 379 Dec 6 15:18 README.txt
>>
>>This is my http.conf entry (again, no permissions):
>>
>><Location /MyProject>
>> DAV svn
>> SVNPath /data/svn/services/customers/MyProject
>></Location>
>>
>>If anyone has an idea as to what the problem is, please let me know.
>>
>>
>
>When I set this up, I found that I needed the SVN repository within
>my HTTP tree - I had some troubles when the repository was outside of
>it(*). There may be a way to change that, but I'm happy with it working
>this way. I also run virtual servers, so I have my <Location>
>directives nested within one of those. Mine looks [sort of] like this:
> <Location /SVN>
> DAV svn
> SVNParentPath /var/www/SVN/
> AuthzSVNAccessFile /var/www/SVN/.authz
> AuthUserFile /var/www/SVN/.htpasswd
> AuthName "Subversion Repository Access"
> AuthType Basic
> require valid-user
> </Location>
>
>This works great for me - I actually have multiple repositories under
>the /SVN umbrella. Access to the repositories is then
> http://MY_SERVER/SVN/xyz
>
>(*) IIRC the trouble I had was that ViewCVS didn't like things that
>were outside of the tree.
>
>
>
Following your suggestion, I tried to setup a repository within the
/var/www/ tree. It worked fine. Unfortunately I need the repository
outside the /var/www tree. The problem seems to be with Apache, but I
can't figure it out for the life of me. I can't even get Apache to
serve ANY html or text page outside of the /var/www/html tree. I have
tried using symbolic links and by specifying an alias and directory as
follows...
Alias /foo "/foo"
<Directory "/foo">
Options FollowSymLinks Indexes
Order allow,deny
Allow from all
</Directory>
I can get Apache to show a directory listing, but no files show up
except nested directories. When I try to access a file (e.g. test.txt)
in this directory via a url, the following error is written to the error
log...
(13)Permission denied: access to /foo/test.txt denied
I have tried everything in terms of permissions and ownership on the
files and directories. I am by no means knowledgable of Apache
configuration, but I have never had any trouble setting up directories
like this. It seems like a pretty basic task. I just can't figure this
out.
I am running Apache/2.0.52 (Fedora). Is there something new to this
version or unique to Fedora that I am missing? This is driving me crazy.
Any help would be greatly appreciated.
Re: another apache permissions problem
Posted by Gary Thomas <ga...@mlbassoc.com>.
On Mon, 2004-12-06 at 15:14, Daniel Anderson wrote:
> I'm a complete svn newbie trying to setup access to a new repository
> through Apache. Everything works just fine when I try to access the
> repository via the file:// protocol, but I can't seem to get it to
> work with Apache. When I try to connect to the svn repository via
> http, I get this error:
>
> svn: PROPFIND request failed on '/MyProject'
> svn:
> Could not open the requested SVN filesystem
>
> ... or through a browser:
>
> <m:human-readable errcode="13">
> Could not open the requested SVN filesystem
> </m:human-readable>
>
> The Apache error log shows the following:
>
> [Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119]
> (20014)Error string not specified yet: Can't open file
> '/data/svn/services/customers/MyProject/format'
> : Permission denied
> [Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
> fetch resource information. [500, #0]
> [Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
> open the requested SVN filesystem [500, #13]
> [Mon Dec 06 16:28:22 2004] [error] [client 192.168.254.119] Could not
> open the requested SVN filesystem [500, #13]
>
>
> The error doesn't make any sense to me because I set global write
> permissions on the project directory in an attempt to ge this to
> work. ls -l on the project direcory:
>
> total 56
> drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 conf
> drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 dav
> drwxrwxrwx 2 root mygroup 4096 Dec 6 15:24 db
> -rwxrwxrwx 1 root mygroup 2 Dec 6 15:18 format
> drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 hooks
> drwxrwxrwx 2 root mygroup 4096 Dec 6 15:18 locks
> -rwxrwxrwx 1 root mygroup 379 Dec 6 15:18 README.txt
>
> This is my http.conf entry (again, no permissions):
>
> <Location /MyProject>
> DAV svn
> SVNPath /data/svn/services/customers/MyProject
> </Location>
>
> If anyone has an idea as to what the problem is, please let me know.
When I set this up, I found that I needed the SVN repository within
my HTTP tree - I had some troubles when the repository was outside of
it(*). There may be a way to change that, but I'm happy with it working
this way. I also run virtual servers, so I have my <Location>
directives nested within one of those. Mine looks [sort of] like this:
<Location /SVN>
DAV svn
SVNParentPath /var/www/SVN/
AuthzSVNAccessFile /var/www/SVN/.authz
AuthUserFile /var/www/SVN/.htpasswd
AuthName "Subversion Repository Access"
AuthType Basic
require valid-user
</Location>
This works great for me - I actually have multiple repositories under
the /SVN umbrella. Access to the repositories is then
http://MY_SERVER/SVN/xyz
(*) IIRC the trouble I had was that ViewCVS didn't like things that
were outside of the tree.
--
Gary Thomas <ga...@mlbassoc.com>
MLB Associates
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org