You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@subversion.apache.org by David Summers <da...@summersoft.fay.ar.us> on 2002/01/26 22:58:41 UTC

[PATCH] RE: Example Server config

Thanks, how about the following patch for INSTALL?  Do the currently 
LIMITed access methods cover all the bases?

Index: ./INSTALL
===================================================================
--- ./INSTALL
+++ ./INSTALL	Sat Jan 26 16:52:30 2002
@@ -432,12 +432,24 @@
           <Location /svn/repos>
              DAV svn
              SVNPath /absolute/path/to/repository
+
+             # <Limit DELETE MERGE MKACTIVITY POST PROPPATCH PUT>
+             #    AuthType Basic
+             #    AuthName "Authorization Realm"
+             #    AuthUserFile /absolute/path/to/svnpasswd
+             #    Require valid-user
+             # </Limit>
+
           </Location>
 
       NOTE: Make sure that the user 'nobody' (or whatever UID the
       httpd process runs as) has permission to read and write the
       Berkeley DB files!  This is a very common problem.
 
+      NOTE: To make this subversion server "secure", execute the
+      "htpasswd -c /absolute/path/to/svnpasswd username" command and
+      uncomment the currently commented <Limit> directives.
+
 9.  In order for 'svn cp' to work (which is actually implemented as a
     DAV COPY command), mod_dav needs to be able to be able to determine
     the hostname of the server.  A standard way of doing this is to use

On Sat, 26 Jan 2002, Mayo wrote:

> Date: Sat, 26 Jan 2002 14:17:22 -0800
> From: Mayo <ma...@nfy.ca>
> To: 'David Summers' <da...@summersoft.fay.ar.us>
> Subject: RE: Example Server config
> 
> Use the <Limit> </Limit> apache directive
> 
> > -----Original Message-----
> > From: David Summers [mailto:david@summersoft.fay.ar.us] 
> > Sent: January 26, 2002 2:07 PM
> > To: dev@subversion.tigris.org
> > Subject: Example Server config
> > 
> > 
> > 
> > OK, I figured out the following so far....
> > 
> > In /etc/httpd/conf/httpd.conf file:
> > 
> > <Location /repos/svngui>
> >    DAV svn
> >    SVNPath /home/svnroot/svngui
> > 
> >    AuthType Basic
> >    AuthName "SVNGUI"
> >    AuthUserFile /home/svnroot/svnpasswd
> >    Require valid-user
> > </Location>
> > 
> > That limits it to the htpasswd users listed, how can I make 
> > it READ-ONLY 
> > available to everyone but require user name and password to commit?
> > 
> >   Thanks
> > 
> > -- 
> > David Wayne Summers          "Linux: Because reboots are for 
> > upgrades!"
> > david@summersoft.fay.ar.us   PGP Key: 
> > http://summersoft.fay.ar.us/~david/pgp.txt
> > PGP Key 
> > fingerprint =  C0 E0 4F 50 DD A9 B6 2B  60 A1 31 7E D2 28 6D A8 
> > 
> > 
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
> > For additional commands, e-mail: dev-help@subversion.tigris.org
> > 
> > 
> 
> 

-- 
David Wayne Summers          "Linux: Because reboots are for upgrades!"
david@summersoft.fay.ar.us   PGP Key: http://summersoft.fay.ar.us/~david/pgp.txt
PGP Key fingerprint =  C0 E0 4F 50 DD A9 B6 2B  60 A1 31 7E D2 28 6D A8 


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org

RE: [PATCH] RE: Example Server config

Posted by Sander Striker <st...@apache.org>.
Hi David,

I have some local mods to INSTALL here.  This includes
coverage of the section in this patch.  I'll finish
the touch up of INSTALL tomorrow.  Expect a commit
soon after I finish ;)

Thanks for the patch btw,

Sander


> -----Original Message-----
> From: David Summers [mailto:david@summersoft.fay.ar.us]
> Sent: 26 January 2002 23:59
> To: dev@subversion.tigris.org
> Subject: [PATCH] RE: Example Server config
> 
> 
> 
> Thanks, how about the following patch for INSTALL?  Do the currently 
> LIMITed access methods cover all the bases?
> 
> Index: ./INSTALL
> ===================================================================
> --- ./INSTALL
> +++ ./INSTALL	Sat Jan 26 16:52:30 2002
> @@ -432,12 +432,24 @@
>            <Location /svn/repos>
>               DAV svn
>               SVNPath /absolute/path/to/repository
> +
> +             # <Limit DELETE MERGE MKACTIVITY POST PROPPATCH PUT>
> +             #    AuthType Basic
> +             #    AuthName "Authorization Realm"
> +             #    AuthUserFile /absolute/path/to/svnpasswd
> +             #    Require valid-user
> +             # </Limit>
> +
>            </Location>
>  
>        NOTE: Make sure that the user 'nobody' (or whatever UID the
>        httpd process runs as) has permission to read and write the
>        Berkeley DB files!  This is a very common problem.
>  
> +      NOTE: To make this subversion server "secure", execute the
> +      "htpasswd -c /absolute/path/to/svnpasswd username" command and
> +      uncomment the currently commented <Limit> directives.
> +
>  9.  In order for 'svn cp' to work (which is actually implemented as a
>      DAV COPY command), mod_dav needs to be able to be able to determine
>      the hostname of the server.  A standard way of doing this is to use
> 
> On Sat, 26 Jan 2002, Mayo wrote:
> 
> > Date: Sat, 26 Jan 2002 14:17:22 -0800
> > From: Mayo <ma...@nfy.ca>
> > To: 'David Summers' <da...@summersoft.fay.ar.us>
> > Subject: RE: Example Server config
> > 
> > Use the <Limit> </Limit> apache directive
> > 
> > > -----Original Message-----
> > > From: David Summers [mailto:david@summersoft.fay.ar.us] 
> > > Sent: January 26, 2002 2:07 PM
> > > To: dev@subversion.tigris.org
> > > Subject: Example Server config
> > > 
> > > 
> > > 
> > > OK, I figured out the following so far....
> > > 
> > > In /etc/httpd/conf/httpd.conf file:
> > > 
> > > <Location /repos/svngui>
> > >    DAV svn
> > >    SVNPath /home/svnroot/svngui
> > > 
> > >    AuthType Basic
> > >    AuthName "SVNGUI"
> > >    AuthUserFile /home/svnroot/svnpasswd
> > >    Require valid-user
> > > </Location>
> > > 
> > > That limits it to the htpasswd users listed, how can I make 
> > > it READ-ONLY 
> > > available to everyone but require user name and password to commit?
> > > 
> > >   Thanks
> > > 
> > > -- 
> > > David Wayne Summers          "Linux: Because reboots are for 
> > > upgrades!"
> > > david@summersoft.fay.ar.us   PGP Key: 
> > > http://summersoft.fay.ar.us/~david/pgp.txt
> > > PGP Key 
> > > fingerprint =  C0 E0 4F 50 DD A9 B6 2B  60 A1 31 7E D2 28 6D A8 
> > > 
> > > 
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
> > > For additional commands, e-mail: dev-help@subversion.tigris.org
> > > 
> > > 
> > 
> > 
> 
> -- 
> David Wayne Summers          "Linux: Because reboots are for upgrades!"
> david@summersoft.fay.ar.us   PGP Key: http://summersoft.fay.ar.us/~david/pgp.txt
> PGP Key fingerprint =  C0 E0 4F 50 DD A9 B6 2B  60 A1 31 7E D2 28 6D A8 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: dev-help@subversion.tigris.org
> 
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org