Re: OPTIONS request failed error

On Wed, Aug 14, 2002 at 01:15:50AM +0200, Olof Oberg wrote:
> On 2002-08-13 15:53:52 (PDT) Shay Harding <sharding@ccbill.com> wrote:
> [snip]
> > The 'Alias' exists because '/repos' is not in the DocumentRoot so Apache
> > needs to know where to find it or else it will return a 404.

As others have said... this isn't true.

> http://httpd.apache.org/docs-2.0/mod/core.html#location
>
> "Note that URLs do not have to line up with the filesystem at all,
> it should be emphasized that <Location> operates completely outside
> the filesystem."

Right. mod_dav_svn serves the Location.

In fact, using an Alias is dangerous. It maps a portion of the filesystem
into the URL space. If something goes wonky, then it might be possible for
somebody to grab http://example.com/repos/db/strings and look at your entire
repository.

You were getting a 301 because your URL did not have a trailing slash. The
Alias and mod_dav_svn were fighting for serving, and Apache won. It saw you
referred to a filesystem directory and didn't include a trailing slash. So
it redirected you to one that *had* a slash.

The answer is to not let Apache serve the thing, and that means to remove
the Alias directive.

Appending the slash worked because when you requested /repos, that did not
match /repos/

Cheers,
-g

-- 
Greg Stein, http://www.lyra.org/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org