[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

PROPFIND and 403 with Debian sid

From: Lasse Øverlier <lasse_at_hig.no>
Date: 2005-06-21 17:03:26 CEST

Hi,

I am having a problem with PROPFIND in Debian sid using Apache2 and
Subversion.

No matter what I have tried to set for permissions both on files and in
authz, I get a 403 Forbidden when the svn client tries to access
PROPFIND of the resource. GET requests over http(s) works fine and
submits the required authentication information which is also shown in
the logs after running svn and then fetching via HTTP(S) at IP x.y.z.z
from client at x.y.z.y:

$ svn checkout --no-auth-cache --username lasse
https://x.y.z.z/mydoc/somewhere/
svn: PROPFIND request failed on '/mydoc/somewhere'
svn: PROPFIND of '/mydoc/somewhere': 403 Forbidden (https://x.y.z.z)
$

and then fetching the URL's through Konqueror to compare access and
log-entries which works fine.

Here are some facts of the system:
* Running Apache/2.0.54 (Debian GNU/Linux) DAV/2 SVN/1.2.0
mod_ssl/2.0.54 OpenSSL/0.9.7g Server at x.y.z.z Port q (i386/sid)

dav_svn.conf:
============
<Location /mydoc>
  DAV svn
  SVNPath /usr/subversion/mydoc
  AuthzSVNAccessFile /etc/apache2/dav_svn.authz
  AuthType Basic
  AuthName "My Document Repository"
  AuthUserFile /etc/apache2/dav_svn.passwd
  <LimitExcept PROPFIND OPTIONS REPORT>
     Require valid-user
  </LimitExcept>
</Location>

dav_svn.authz:
=============
[mydoc:/somewhere]
other = r
lasse = rw

[mydoc:/]
lasse = rw

The configuration file for the Apache server contains these entries:
<Directory />
         Options FollowSymLinks
         AllowOverride None
</Directory>

<Directory /var/www/>
        Options Indexes FollowSymLinks MultiViews
        AllowOverride None
        Order allow,deny
        allow from all
</Directory>

error.log:
==========
[Tue Jun 21 16:43:55 2005] [error] [client x.y.z.y] Access denied: -
PROPFIND mydoc:/somewhere

access.log:
===========
x.y.z.y - - [21/Jun/2005:16:43:55 +0200] "PROPFIND /mydoc/somewhere
HTTP/1.1" 403 232 "-" "SVN/1.1.4 (r13838) neon/0.24.7"
x.y.z.y - - [21/Jun/2005:16:46:46 +0200] "GET /mydoc/somewhere/
HTTP/1.1" 401 401 "-" "Mozilla/5.0 (compatible; Konqueror/3.3)
KHTML/3.3.2 (like Gecko)"
x.y.z.y - lasse [21/Jun/2005:16:46:52 +0200] "GET /mydoc/somewhere/
HTTP/1.1" 200 502 "-" "Mozilla/5.0 (compatible; Konqueror/3.3)
KHTML/3.3.2 (like Gecko)"

The GET from Konqueror works fine, but the PROPFIND from the svn-client
does not let me checkout...

Any suggestions would be nice and please reply with a cc to me directly.

To complicate this I *also* tried to enforce to avoid low encryption on
the HTTPS protocol (SSLCipherSuite HIGH:MEDIUM in the apache2
configuration) and I got this error message from the svn-client:
svn: PROPFIND of '/mydoc/somewhere': Could not read status line: SSL
error: sslv3 alert unexpected message (https://x.y.z.z)

Thanks!

 - Lasse

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Jun 22 18:30:03 2005

This is an archived mail posted to the Subversion Users mailing list.