Hi,
I am having a problem with PROPFIND in Debian sid using Apache2 and
Subversion.
No matter what I have tried to set for permissions both on files and in
authz, I get a 403 Forbidden when the svn client tries to access
PROPFIND of the resource. GET requests over http(s) works fine and
submits the required authentication information which is also shown in
the logs after running svn and then fetching via HTTP(S) at IP x.y.z.z
from client at x.y.z.y:
$ svn checkout --no-auth-cache --username lasse
https://x.y.z.z/mydoc/somewhere/
svn: PROPFIND request failed on '/mydoc/somewhere'
svn: PROPFIND of '/mydoc/somewhere': 403 Forbidden (https://x.y.z.z)
$
and then fetching the URL's through Konqueror to compare access and
log-entries which works fine.
Here are some facts of the system:
* Running Apache/2.0.54 (Debian GNU/Linux) DAV/2 SVN/1.2.0
mod_ssl/2.0.54 OpenSSL/0.9.7g Server at x.y.z.z Port q (i386/sid)
dav_svn.conf:
============
<Location /mydoc>
DAV svn
SVNPath /usr/subversion/mydoc
AuthzSVNAccessFile /etc/apache2/dav_svn.authz
AuthType Basic
AuthName "My Document Repository"
AuthUserFile /etc/apache2/dav_svn.passwd
<LimitExcept PROPFIND OPTIONS REPORT>
Require valid-user
</LimitExcept>
</Location>
dav_svn.authz:
=============
[mydoc:/somewhere]
other = r
lasse = rw
[mydoc:/]
lasse = rw
The configuration file for the Apache server contains these entries:
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
<Directory /var/www/>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
</Directory>
error.log:
==========
[Tue Jun 21 16:43:55 2005] [error] [client x.y.z.y] Access denied: -
PROPFIND mydoc:/somewhere
access.log:
===========
x.y.z.y - - [21/Jun/2005:16:43:55 +0200] "PROPFIND /mydoc/somewhere
HTTP/1.1" 403 232 "-" "SVN/1.1.4 (r13838) neon/0.24.7"
x.y.z.y - - [21/Jun/2005:16:46:46 +0200] "GET /mydoc/somewhere/
HTTP/1.1" 401 401 "-" "Mozilla/5.0 (compatible; Konqueror/3.3)
KHTML/3.3.2 (like Gecko)"
x.y.z.y - lasse [21/Jun/2005:16:46:52 +0200] "GET /mydoc/somewhere/
HTTP/1.1" 200 502 "-" "Mozilla/5.0 (compatible; Konqueror/3.3)
KHTML/3.3.2 (like Gecko)"
The GET from Konqueror works fine, but the PROPFIND from the svn-client
does not let me checkout...
Any suggestions would be nice and please reply with a cc to me directly.
To complicate this I *also* tried to enforce to avoid low encryption on
the HTTPS protocol (SSLCipherSuite HIGH:MEDIUM in the apache2
configuration) and I got this error message from the svn-client:
svn: PROPFIND of '/mydoc/somewhere': Could not read status line: SSL
error: sslv3 alert unexpected message (https://x.y.z.z)
Thanks!
- Lasse
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Jun 22 18:30:03 2005