user names from ssl client certificates with mod_authz_svn
From: Jan <janreise_at_yahoo.de>
Date: 2004-08-15 11:59:22 CEST
I have a problem setting up mod_authz_svn in combination with ssl
I'm trying to access a repository at a URL
This works just fine as long as I don't use mod_authz_svn, i.e. as long
As soon as I comment it in, I get an 'Access denied' error.
Could it be that mod_authz_svn does not recognize the user name format
I have added log and configuration files below.
Thanks in advance for any pointers
--- Apache log: [Sun Aug 15 11:30:17 2004] [info] Connection to child 0 established (server my.server.org:443, client 211.7.133.102) [Sun Aug 15 11:30:17 2004] [info] Seeding PRNG with 512 bytes of entropy [Sun Aug 15 11:30:19 2004] [info] Initial (No.1) HTTPS request received for child 0 (server my.server.org:443) [Sun Aug 15 11:30:19 2004] [info] Requesting connection re-negotiation [Sun Aug 15 11:30:19 2004] [info] Awaiting re-negotiation handshake [Sun Aug 15 11:30:21 2004] [info] Faking HTTP Basic Auth header: "Authorization: Basic L089ajd8snfklx0DJNv9dlsncc2lvbiBVc2Vycy9lbWXi8asd9DHJ873NjskdjfVpc2VAeWF ob28uZGUvTD1LaWVsL1NUPVNjaGxlc3dpZy1Ib2xzdGVpbi9DPURFL0NOPWpyZWlzZTpwYXN zd29yZA" [Sun Aug 15 11:30:21 2004] [error] [client 211.7.133.102] Access denied: '/O=Test/OU=Test Users/emailAddress=janreise@yahoo.de/L=Test/ST=Test-State/C=DE/CN=jan' GET / dav_svn.conf: --- begin --- <Location /svn> SSLRequireSSL DAV svn SVNParentPath /var/subversion SSLVerifyClient require SSLVerifyDepth 1 SSLCACertificatePath /etc/apache/private SSLCACertificateFile /etc/apache/private/rootcert.pem SSLOptions +FakeBasicAuth Require valid-user AuthType Basic AuthName "Subversion Repository" AuthUserFile /etc/apache/svn-access/auth-file AuthzSVNAccessFile /etc/apache/svn-access/access-file </Location> --- end --- auth-file: --- begin --- /O=Test/OU=Test Users/emailAddress=janreise@yahoo.de/L=Test/ST=Test-State/C=DE/CN=jan: --- end --- access-file: --- begin --- [test-repository:/] '/O=Test/OU=Test Users/emailAddress=janreise@yahoo.de/L=Test/ST=Test-State/C=DE/CN=jan' = rw --- end note: I've already tried the user name without quotes, with single quotes ('), and with double quotes ("). --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org For additional commands, e-mail: users-help@subversion.tigris.orgReceived on Sun Aug 15 16:02:40 2004 |
This is an archived mail posted to the Subversion Users mailing list.
This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.