I've been accessing Subversion fine by both HTTP (apache2) and SSH until
today, when I had a need to restrict a user to a specific directory. I can't
work out how to configure SVN to do this and have it work. I'm basing my
config on the instructions at
http://svnbook.red-bean.com/en/1.4/svn.serverconfig.pathbasedauthz.html
If I use a path directive like [reponame:/] it works as expected. If I use a
path directive like [/] it works as expected.
But if I use a path directive like [reponame:/path/to/dir/] then it returns
a 403 against the OPTIONS request when auth details are provided. I can
reliably reproduce the issue by removing any path elements beyond a simple
[reponame:/].
System is Debian Etch. Apache is 2.2.3-4+etch11. SVN is 1.4.2dfsg1-3. Tested
with various SVN clients on OSX and Ubuntu.
/home/www-home/svn.example.org/control reads -
[groups]
example = chris
client = sally, fred
[example:/]
chris = rw
[client:/sites/example.com/]
sally = rw
[client:/]
fred = rw
Sally will not have access to
http://svn.example.org/client/sites/example.com/ but Fred will.
Apache config reads -
<VirtualHost *>
ServerAdmin info_at_svn.example.org
ServerName svn.example.org
<Location /repos>
Options Indexes FollowSymLinks MultiViews
DAV svn
SVNParentPath /home/SVN
SVNListParentPath on
SVNIndexXSLT "http://svn.example.org/svnindex.xsl"
AuthzSVNAccessFile /home/www-home/svn.example.org/control
# anonymous first
Satisfy Any
Require valid-user
# authenticating them valid ones
AuthType Basic
AuthName "EO Subversion"
AuthUserFile /home/www-home/svn.example.org/passwd
</Location>
Alias /svnindex.xsl /var/www/apache2-default/svnindex.xsl
Alias /svnindex.css /var/www/apache2-default/svnindex.css
ErrorLog /var/log/apache2/error.log
CustomLog /var/log/apache2/sites/svn.log combined
CustomLog /var/log/apache2/svn_log "%t %u %{SVN-ACTION}e"
env=SVN-ACTION
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn
ServerSignature On
php_value sendmail_from info_at_example.org
</VirtualHost>
Can anyone point me in the right direction please?
I did spot this which reports similar symptoms, but doesn't shed much
light: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504710
Thanks in advance!
------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2423776
Please start new threads on the <users_at_subversion.apache.org> mailing list.
To subscribe to the new list, send an empty e-mail to <users-subscribe_at_subversion.apache.org>.
Received on 2009-11-24 12:33:55 CET