You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Oliver Pajonk <ol...@gmail.com> on 2007/07/27 08:23:39 UTC

SVNListParentPath not working

Hello *,

I just tried to setup Apache with "SVNListParentPath On", but all it
says when I want to list my repositories is "403 Forbidden". The error
log of Apache says:

[Fri Jul 27 10:17:52 2007] [error] [client 134.169.77.167] The URI
does not contain the name of a repository.  [403, #190001]

which is quite correct as I want to LIST them. The rest of my setup
works perfectly, only the listing is not. Does anybody have any clue
on this?

--------------

vps:~# svn --version
svn, version 1.4.2 (r22196)
   compiled Nov 10 2006, 17:39:50


vps:~# apache2 -v
Server version: Apache/2.2.3
Server built:   Jun 10 2007 17:06:44

Debian testing

And the relevant part of my Apache configuration (this is located in a vhost):

        <Location />
          DAV svn
          SVNParentPath /var/lib/svn
          SVNListParentPath on

          AuthType Basic
          AuthName "Subversion Repositories"
          AuthUserFile /var/lib/svn/passwdfile

          AuthzSVNAccessFile /var/lib/svn/accessfile

          Require valid-user

        </Location>

Note: I also tried to use a different location, like "/svn", but that
did not help either. Same error.

-- 
Oliver Pajonk

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: SVNListParentPath not working

Posted by Oliver Pajonk <ol...@gmail.com>.
2007/7/27, Lieven Govaerts <sv...@mobsol.be>:
> No, it doesn't. This was reported as issue 2753:
> http://subversion.tigris.org/issues/show_bug.cgi?id=2753
>
> Lieven

Uh sorry, I should have searched the bug database first... thank you!

-- 
Oliver Pajonk

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: SVNListParentPath not working

Posted by Lieven Govaerts <sv...@mobsol.be>.
Quoting Erik Huelsmann <eh...@gmail.com>:

> On 7/27/07, Oliver Pajonk <ol...@gmail.com> wrote:
> > Hello *,
> >
> > I just tried to setup Apache with "SVNListParentPath On", but all it
> > says when I want to list my repositories is "403 Forbidden". The error
> > log of Apache says:
> >
> > [Fri Jul 27 10:17:52 2007] [error] [client 134.169.77.167] The URI
> > does not contain the name of a repository.  [403, #190001]
> >
>
> I don't think SVNListParentPath works correctly (yet?) when
> interacting with auth setups...
>

No, it doesn't. This was reported as issue 2753:
http://subversion.tigris.org/issues/show_bug.cgi?id=2753

Lieven



----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: SVNListParentPath not working

Posted by Erik Huelsmann <eh...@gmail.com>.
On 7/27/07, Oliver Pajonk <ol...@gmail.com> wrote:
> Hello *,
>
> I just tried to setup Apache with "SVNListParentPath On", but all it
> says when I want to list my repositories is "403 Forbidden". The error
> log of Apache says:
>
> [Fri Jul 27 10:17:52 2007] [error] [client 134.169.77.167] The URI
> does not contain the name of a repository.  [403, #190001]
>
> which is quite correct as I want to LIST them. The rest of my setup
> works perfectly, only the listing is not. Does anybody have any clue
> on this?
>
> --------------
>
> vps:~# svn --version
> svn, version 1.4.2 (r22196)
>   compiled Nov 10 2006, 17:39:50
>
>
> vps:~# apache2 -v
> Server version: Apache/2.2.3
> Server built:   Jun 10 2007 17:06:44
>
> Debian testing
>
> And the relevant part of my Apache configuration (this is located in a vhost):
>
>        <Location />
>          DAV svn
>          SVNParentPath /var/lib/svn
>          SVNListParentPath on
>
>          AuthType Basic
>          AuthName "Subversion Repositories"
>          AuthUserFile /var/lib/svn/passwdfile
>
>          AuthzSVNAccessFile /var/lib/svn/accessfile
>
>          Require valid-user
>
>        </Location>
>
> Note: I also tried to use a different location, like "/svn", but that
> did not help either. Same error.

I don't think SVNListParentPath works correctly (yet?) when
interacting with auth setups...

bye,


Erik.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: mod_authz_svn and permissions

Posted by Erik Huelsmann <eh...@gmail.com>.
On 7/27/07, Andy Levy <an...@gmail.com> wrote:
> On 7/27/07, Johnathan Gifford <jg...@wernervas.com> wrote:
> > I've looked at the Subversion booked and searched the Internet for
> > solution to this with no luck.
> >
> > I have a repository with a group that only has write privileges on
> > branches for all known paths in the repository.  However, if a new
> > project is created in the repository with a set of tags, trunks, and
> > branches under it, this group cannot write to that directory until I add
> > the new project branch path to the authorization file.  Being the
> > administrator that doesn't like to have to do everything all the time
> > for the users, my question is: Does the mod_authz_svn support
> > authorization files with regex patterns or wildcards for repository
> > paths?
> >
> > Basically this might look like:
> >
> > [therepo:/]
> > @thatgroup = rw
> > @thisgroup = r
> >
> > [therepo:*/branches]
> > @thisgroup = rw
> >
> > The purpose of this is to keep the team that uses that repository from
> > always coming back to me so the new projects don't have to be added to
> > the authorization file each time.  If Subversion doesn't support this
> > kind of syntax with mod_authz_svn, do you think a feature request should
> > be made to do so?
>
> Wildcards aren't supported. There may already be a request in the
> Subversion bug database, have you searched it yet?
>
> You could also look at svnperms.py.

There's a patch somewhere in the dev@ mailing list archives to add
wildcards. There were a lot of remarks making it impossible to add in
the state it was in, but it was functional. You may want to have a
look.

bye,

Erik.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: mod_authz_svn and permissions

Posted by Andy Levy <an...@gmail.com>.
On 7/27/07, Johnathan Gifford <jg...@wernervas.com> wrote:
> I've looked at the Subversion booked and searched the Internet for
> solution to this with no luck.
>
> I have a repository with a group that only has write privileges on
> branches for all known paths in the repository.  However, if a new
> project is created in the repository with a set of tags, trunks, and
> branches under it, this group cannot write to that directory until I add
> the new project branch path to the authorization file.  Being the
> administrator that doesn't like to have to do everything all the time
> for the users, my question is: Does the mod_authz_svn support
> authorization files with regex patterns or wildcards for repository
> paths?
>
> Basically this might look like:
>
> [therepo:/]
> @thatgroup = rw
> @thisgroup = r
>
> [therepo:*/branches]
> @thisgroup = rw
>
> The purpose of this is to keep the team that uses that repository from
> always coming back to me so the new projects don't have to be added to
> the authorization file each time.  If Subversion doesn't support this
> kind of syntax with mod_authz_svn, do you think a feature request should
> be made to do so?

Wildcards aren't supported. There may already be a request in the
Subversion bug database, have you searched it yet?

You could also look at svnperms.py.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

mod_authz_svn and permissions

Posted by Johnathan Gifford <jg...@wernervas.com>.
I've looked at the Subversion booked and searched the Internet for
solution to this with no luck.

I have a repository with a group that only has write privileges on
branches for all known paths in the repository.  However, if a new
project is created in the repository with a set of tags, trunks, and
branches under it, this group cannot write to that directory until I add
the new project branch path to the authorization file.  Being the
administrator that doesn't like to have to do everything all the time
for the users, my question is: Does the mod_authz_svn support
authorization files with regex patterns or wildcards for repository
paths?  

Basically this might look like:

[therepo:/]
@thatgroup = rw
@thisgroup = r

[therepo:*/branches]
@thisgroup = rw

The purpose of this is to keep the team that uses that repository from
always coming back to me so the new projects don't have to be added to
the authorization file each time.  If Subversion doesn't support this
kind of syntax with mod_authz_svn, do you think a feature request should
be made to do so?

Thanks,

Johnathan

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: SVNListParentPath not working

Posted by Oliver Pajonk <ol...@gmail.com>.
2007/7/27, Rainer Sokoll <R....@intershop.de>:
> Uh-oh, I see: SVNListParentPath on ;-))
> Anyway: It's working for me.
>

Gotcha :-) Well; it's not that critcal for us, we will just wait until
it is resolved. I was just wondering what I was doing wrong...

-- 
Oliver Pajonk

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: SVNListParentPath not working

Posted by Rainer Sokoll <R....@intershop.de>.
On Fri, Jul 27, 2007 at 04:34:50PM +0200, Oliver Pajonk wrote:

> Uhm, that's strange... what does "Include conf/subversion.conf"
> contain?

Uh-oh, I see: SVNListParentPath on ;-))
Anyway: It's working for me.

-----8<----
DAV svn
SVNIndexXSLT "/stylesheets/svnindex.xsl"
SVNListParentPath on
AuthType Basic
AuthLDAPEnabled on
AuthLDAPAuthoritative on
AuthLDAPBindDN "xxxx"
AuthLDAPBindPassword xxxx
AuthLDAPUrl xxxx
require valid-user
-----8<----

Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: SVNListParentPath not working

Posted by Oliver Pajonk <ol...@gmail.com>.
2007/7/27, Rainer Sokoll <R....@intershop.de>:
> Listing of repositories works for me - without SVNListParentPath. I have
> only SVNParentPath set:
>
> ------8<----
>    <Location /fullservice/>
>      AuthUserFile conf/svnaccess/passwd.fullservice
>      AuthAuthoritative off
>      Include conf/subversion.conf
>      SVNParentPath /svn/svn/fullservice
>      AuthzSVNAccessFile conf/svnaccess/svnaccess.fullservice
>      AuthName "Access to FullService area"
>   </Location>
> ------8<----
>
> svn 1.4.4, apache 2.0.59.

Uhm, that's strange... what does "Include conf/subversion.conf"
contain? Maybe there's some magic hidden inside ;-)

-- 
Oliver Pajonk

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: SVNListParentPath not working

Posted by Rainer Sokoll <R....@intershop.de>.
On Fri, Jul 27, 2007 at 10:23:39AM +0200, Oliver Pajonk wrote:

> I just tried to setup Apache with "SVNListParentPath On", but all it
> says when I want to list my repositories is "403 Forbidden".

Listing of repositories works for me - without SVNListParentPath. I have
only SVNParentPath set:

------8<----
   <Location /fullservice/>
     AuthUserFile conf/svnaccess/passwd.fullservice
     AuthAuthoritative off
     Include conf/subversion.conf
     SVNParentPath /svn/svn/fullservice
     AuthzSVNAccessFile conf/svnaccess/svnaccess.fullservice
     AuthName "Access to FullService area"
  </Location>
------8<----

svn 1.4.4, apache 2.0.59.

Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org