[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

production svn server, access and permissions

From: dave <dmehler26_at_woh.rr.com>
Date: 2005-01-12 05:21:43 CET

Hello,
    After using subversion to manage some personal projects i'm ready to
deploy it in place of my existing cvs server on a FreeBSD 5.3 machine. I
want to use http access for both network and local usages avoiding what i
hope will be very few permissions issues.
    I've got apache2 installed and subversion 1.1.1 using fsfs repositories.
I've grouped all the repositories under /home/svn/repos and am going to make
different repositories per project rather than one large one. I have the
following in my httpd.conf file:

## SVN WebDAV Repository Setup
<Location /svn>
     DAV svn
     SVNParentPath /home/svn/repos
     SVNIndexXSLT "http://www.example.com/svnindex.xsl"

     # anonymous first
     Satisfy Any
     Require valid-user

     # authenticating them valid ones
     AuthType Basic
     AuthName "Subversion Repositories"
     AuthUserFile /home/svn/access/users
# For any operations other than these, require an authenticated user.
<LimitExcept GET PROPFIND OPTIONS REPORT>
Require valid-user
</LimitExcept>
</Location>

and have created a test repository:

svnadmin create /home/svn/repos/test --fs-type fsfs

This went well. I then changed permissions and ownerships so that all files
under /home/svn were owned and grouped by apache and set them to 770
permissions. My first question is are these permissions and configuration
correct? On a personal nonnetworked server i didn't much care as long as it
worked, which it did superbly, now that i am networking this i don't want to
leave myself open, that was one of my concerns with cvs.
    My second question is i am not at all thrilled about passing passwords
in basic authentication, does anyone have a config for https authentication
for authentication but http for anonymous browsing? I've created a
self-signed ssl certificate and have my own test ca, i'd like to tell svn
about it.
Thanks much.
Dave.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Jan 12 05:25:31 2005

This is an archived mail posted to the Subversion Users mailing list.