[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

mod_authz_svn, mixed configuration, (no author) problem

From: Tim Shadel <timshadel_at_pobox.com>
Date: 2004-04-27 03:31:40 CEST

OK. Here's what I want to achieve:

    1. SVN repository only available through ViewCVS and Apache
    2. Anonymous browsing of SVN repository via Apache
    3. Only authorized users may change files
    4. Many repositories under one parent path

I've read the following resources:

    # authz config stuff, including mixed config setup
    http://svnbook.red-bean.com/svnbook/book.html#svn-ch-6-sect-4.4.2-ex-3
    
http://svn.collab.net/viewcvs/svn/trunk/subversion/mod_authz_svn/INSTALL?rev=8960&view=markup
(HEAD revision at time of writing)
    http://www.contactor.se/~dast/svnusers/archive-2004-03/1668.shtml
    http://httpd.apache.org/docs-2.0/mod/core.html#satisfy

I've setup my <Location> directive almost exactly like the examples
shown in the SVN book and the mod_authz_svn/INSTALL document (the two
differ in the ordering of directives, but that doesn't seem to matter).

I do the following:

    svn co http://my/svn/dir
    svn add file.txt
    svn ci -m "Commit, and see if user required"

I am never asked for a password, and (no author) is listed as having
added the file:

    svn log file.txt
    ------------------------------------------------------------------------
    r70 | (no author) | 2004-04-26 14:37:34 -0700 (Mon, 26 Apr 2004) | 1
line

    Commit, and see if user required
    ------------------------------------------------------------------------

I've read the following info about (no author):

    # (no author) info
    http://svnbook.red-bean.com/svnbook/book.html#svn-ch-6-sect-2.1
    http://subversion.tigris.org/project_faq.html#no-author

Knowing that my httpd setup was liketly to blame for this, I then
commented out the "Satisfy Any" directive in my <Location> element, and
my author information was successfully saved. I assume an auth
challenge occurred. I was able to both give the password at the command
line and on a second commit have auth information correctly pulled from
my %APPDIR%\Subversion cache.

The only problem is that my repository could no longer be browsed
anonymously.

It appears that when "Satisfy Any" is used, my clients are not being
challenged for a password. I assume I've got something setup wrong, but
I must be blind and I hoped someone could help me out.

Thanks in advance for your help,

Tim

CONFIG INFO:
-------------------

I run SVN 1.0.1 (on both client and server), Apache 2.0.48, and Berkley
DB 4.2 (I think) on Windows 2000. I installed SVN using the windows
installation (not zip) distribution..

svn, version 1.0.1 (dev build)
   compiled Mar 25 2004, 16:25:21

Here are the relevant parts of my config files

===================================================================
httpd.conf

LoadModule dav_svn_module modules/mod_dav_svn.so
LoadModule authz_svn_module modules/mod_authz_svn.so

[snip]

#
# Basic subversion setup
#
<Location /svn>
  DAV svn
  SVNParentPath /svn-repos

  # how to authenticate a user
  AuthType Basic
  AuthName "Subversion repository"
  AuthUserFile /svn-repos/svn-users.htpasswd

  # our access control policy
  AuthzSVNAccessFile /svn-repos/svn-access.config

  # only authenticated users may access the repository
  Satisfy Any
  Require valid-user

</Location>

#
# XML subversion setup
# Try to emulate svn.collab.net, haven't tried to make it read-only yet
#
<Location /svn-xml>
  DAV svn
  SVNParentPath /svn-repos
  SvnIndexXSLT "/svn-tools/svnindex.xsl"

  # how to authenticate a user
  AuthType Basic
  AuthName "Subversion repository"
  AuthUserFile /svn-repos/svn-users.htpasswd

  # our access control policy
  AuthzSVNAccessFile /svn-repos/svn-access.config

  # only authenticated users may access the repository
  Satisfy Any
  Require valid-user
</Location>

#
# ViewCVS/SVN setup
#
ScriptAlias /viewsvn "C:/Program Files/Apache
Group/Apache2/cgi-bin/viewcvs.cgi"

===================================================================
svn-access.config

[/]
* = r

[demo:/]
tims = rw

===================================================================
svn-users.htpasswd
tims:(hashed password)

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Tue Apr 27 17:38:43 2004

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.