[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

SVN/SSPI/AuthzSVNAccessFile with multiple repositories

From: Jens Peters <jpeters7677_at_gmx.de>
Date: 2004-03-25 07:34:12 CET

Since there are a lot of questions about this topic I'll will post my
results here.
It took me some time to get that the problem is the SVNParentPath
directive toegether with SSPI and AuthzSVNAccessFile. But you can do
different, just define each repository for its own in the httpd.conf and
don't use a repo-tag (eg. [ea:/] )in the access-file and it should work
(it did for me).
 
Here is my example:
 
httpd.conf
****************************************************
...
# Subversion
 
<Location /svn/ea>
DAV svn
#SVNParentPath E:\SVN
SVNPath E:\SVN\ea
 
# access control policy for this repo
AuthzSVNAccessFile E:\SVN\ea\svn-auth.conf
 
# only authenticated users may access the repository
Require valid-user
 
 # how to authenticate a user
AuthType SSPI
AuthName "Subversion repositories"

# SSPI settings
SSPIAuth On
SSPIAuthoritative On
# point to domaincontroller
SSPIDomain dc.domain.local
SSPIOfferBasic On
 
</Location>
 
<Location /svn/ea2>
DAV svn
 
#SVNParentPath E:\SVN
SVNPath E:\SVN\ea2
 
# access control policy for this repo
AuthzSVNAccessFile E:\SVN\ea2\svn-auth.conf
 
# only authenticated users may access the repository
Require valid-user
 
 # how to authenticate a user
AuthType SSPI
AuthName "Subversion repositories"

# SSPI settings
SSPIAuth On
SSPIAuthoritative On
# point to domaincontroller
SSPIDomain dc.domain.local
SSPIOfferBasic On
 
</Location>

****************************************************
 
 
E:\SVN\ea\svn-auth.conf
****************************************************
# ea
[groups]
admin = domain\user
developers = domain\user1,domain\user2
doc = domain\user3
 
[/]
* = r
@admin = rw

[/trunk]
@developers = rw
@doc =
 
[/tags]
@developers = rw
@doc = r
 
[/branches]
@developers = rw
@doc =
 
****************************************************
 
E:\SVN\ea2\svn-auth.conf
****************************************************
# ea2
[groups]
admin = domain\user
developers = domain\user1,domain\user2
doc = domain\user3
 
[/]
* = r
@admin = rw
 
[/trunk]
@developers = rw
@doc =
 
[/tags]
@developers =
@doc = r
 
[/branches]
@developers = rw
@doc =
 
****************************************************
 
Login is always with domain\username and pwd.
 
Note:
I' using svn 1.0.0, I just read that in svn 1.0.1 this should be easier
(issue #1588 fixed) to achieve....
Received on Thu Mar 25 07:35:09 2004

This is an archived mail posted to the Subversion Users mailing list.