You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Benoit des Ligneris <be...@revolutionlinux.com> on 2004/03/14 04:35:48 UTC
Authentification problem with AuthzSVNAccessFile
Hello,
I'm trying to set up several repositories with one common acces file for
all definig users and groups as well as access permissions for the different
repositories.
My setting is the following :
/home/svn
/home/svn/repos1/
conf, dav, db, etc.
/home/svn/repos2/
conf, dav, db, etc.
/home/svn/repos3/
conf, dav, db, etc.
Here is my relevant part of my apache config file :
<Location /svn>
DAV svn
SVNParentPath /home/svn/
AuthType Basic
AuthName "Revolution Linux Subversion repository"
AuthUserFile /home/ben/Projets/SVN/paswd
# our access control policy
AuthzSVNAccessFile /home/ben/Projets/SVN/access
Require valid-user
</Location>
[ When I use only the basic auth, I can acces (rw) all the repositories and subversion
as well as the web interface are fully functionnal].
On the same level, If I put in /home/ben/Projets/SVN/access
=== start /home/ben/Projets/SVN/access ===
[/]
ben = rw
=== end /home/ben/Projets/SVN/access ===
then all is fine.
However, I was not able to set up a restricted access to a repository, for instance if
I have the following file :
=== start /home/ben/Projets/SVN/access ===
[/repos1/]
ben=rw
=== end /home/ben/Projets/SVN/access ===
or even
=== start /home/ben/Projets/SVN/access ===
[repos1:/]
ben=rw
=== end /home/ben/Projets/SVN/access ===
Then I neither the web interface nor subversion are allowing me to acces the repository repos1.
I have the following errors in apache log :
[Sat Mar 13 23:21:47 2004] [error] [client 69.70.215.250] Access denied:
'ben' PROPFIND /trunk/Documentation
And what I have on the client side :
svn: PROPFIND request failed on '/svn/repos1/trunk/Documentation'
svn: PROPFIND of '/svn/repos1/trunk/Documentation': authorization failed (https://tata.toto.com)
It looks like the "key" string ("repos1") is somehow lost, certainly because I do not understand
something well or because of my particular setting...
Thank you for your help,
Ben
--
Benoit des Ligneris Ph. D.
President de Revolution Linux http://www.revolutionlinux.com/
OSCAR Chair http://oscar.openclustergroup.org/
Chef de projet EduLinux http://www.edulinux.org/
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: Authentification problem with AuthzSVNAccessFile
Posted by Benoit des Ligneris <be...@revolutionlinux.com>.
Hello,
I updated my server from 1.0.0 to 1.0.1 and it solves my problem.
Thank for the help.
Ben
* Sander Striker <st...@apache.org> [04-03-14 06:31]:
> On Sun, 2004-03-14 at 05:35, Benoit des Ligneris wrote:
> > Hello,
> >
> > I'm trying to set up several repositories with one common acces file for
> > all definig users and groups as well as access permissions for the different
> > repositories.
>
> [...]
> > Here is my relevant part of my apache config file :
> > <Location /svn>
> > DAV svn
> > SVNParentPath /home/svn/
> > AuthType Basic
> > AuthName "Revolution Linux Subversion repository"
> > AuthUserFile /home/ben/Projets/SVN/paswd
> > # our access control policy
> > AuthzSVNAccessFile /home/ben/Projets/SVN/access
> > Require valid-user
> > </Location>
> >
> > [ When I use only the basic auth, I can acces (rw) all the repositories and subversion
> > as well as the web interface are fully functionnal].
> >
> > On the same level, If I put in /home/ben/Projets/SVN/access
> > === start /home/ben/Projets/SVN/access ===
> > [/]
> > ben = rw
> > === end /home/ben/Projets/SVN/access ===
> >
> > then all is fine.
> >
> > However, I was not able to set up a restricted access to a repository, for instance if
> > I have the following file :
> >
> > === start /home/ben/Projets/SVN/access ===
> > [/repos1/]
> > ben=rw
> > === end /home/ben/Projets/SVN/access ===
>
> This will apply to the /repos1 directory _within_ a repository. Note
> that the trailing slash is undesireable.
>
> > or even
> >
> > === start /home/ben/Projets/SVN/access ===
> > [repos1:/]
> > ben=rw
> > === end /home/ben/Projets/SVN/access ===
>
> Which is the correct syntax.
>
> > Then I neither the web interface nor subversion are allowing me to acces the repository repos1.
> >
> > I have the following errors in apache log :
> > [Sat Mar 13 23:21:47 2004] [error] [client 69.70.215.250] Access denied:
> > 'ben' PROPFIND /trunk/Documentation
> >
> > And what I have on the client side :
> > svn: PROPFIND request failed on '/svn/repos1/trunk/Documentation'
> > svn: PROPFIND of '/svn/repos1/trunk/Documentation': authorization failed (https://tata.toto.com)
>
> This is kind of an indication that you are running a version < 1.0.1 on
> the server. 1.0.1 fixed mod_authz_svn to support SVNParentPath, that
> wasn't available 1.0.0 and before.
>
> HTH,
>
> Sander
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
--
Benoit des Ligneris Ph. D.
President de Revolution Linux http://www.revolutionlinux.com/
OSCAR Chair http://oscar.openclustergroup.org/
Chef de projet EduLinux http://www.edulinux.org/
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: Authentification problem with AuthzSVNAccessFile
Posted by Sander Striker <st...@apache.org>.
On Sun, 2004-03-14 at 05:35, Benoit des Ligneris wrote:
> Hello,
>
> I'm trying to set up several repositories with one common acces file for
> all definig users and groups as well as access permissions for the different
> repositories.
[...]
> Here is my relevant part of my apache config file :
> <Location /svn>
> DAV svn
> SVNParentPath /home/svn/
> AuthType Basic
> AuthName "Revolution Linux Subversion repository"
> AuthUserFile /home/ben/Projets/SVN/paswd
> # our access control policy
> AuthzSVNAccessFile /home/ben/Projets/SVN/access
> Require valid-user
> </Location>
>
> [ When I use only the basic auth, I can acces (rw) all the repositories and subversion
> as well as the web interface are fully functionnal].
>
> On the same level, If I put in /home/ben/Projets/SVN/access
> === start /home/ben/Projets/SVN/access ===
> [/]
> ben = rw
> === end /home/ben/Projets/SVN/access ===
>
> then all is fine.
>
> However, I was not able to set up a restricted access to a repository, for instance if
> I have the following file :
>
> === start /home/ben/Projets/SVN/access ===
> [/repos1/]
> ben=rw
> === end /home/ben/Projets/SVN/access ===
This will apply to the /repos1 directory _within_ a repository. Note
that the trailing slash is undesireable.
> or even
>
> === start /home/ben/Projets/SVN/access ===
> [repos1:/]
> ben=rw
> === end /home/ben/Projets/SVN/access ===
Which is the correct syntax.
> Then I neither the web interface nor subversion are allowing me to acces the repository repos1.
>
> I have the following errors in apache log :
> [Sat Mar 13 23:21:47 2004] [error] [client 69.70.215.250] Access denied:
> 'ben' PROPFIND /trunk/Documentation
>
> And what I have on the client side :
> svn: PROPFIND request failed on '/svn/repos1/trunk/Documentation'
> svn: PROPFIND of '/svn/repos1/trunk/Documentation': authorization failed (https://tata.toto.com)
This is kind of an indication that you are running a version < 1.0.1 on
the server. 1.0.1 fixed mod_authz_svn to support SVNParentPath, that
wasn't available 1.0.0 and before.
HTH,
Sander
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org