[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: AuthzSVNAccessFile and branching

From: Lieven Govaerts <lgo_at_mobsol.be>
Date: 2005-07-07 23:54:36 CEST


I'm out of the useful things to test, maybe someone else on this list
can help? This should be and probably is a trivial thing, but I don't
see it.
I'm still not sure about the (null) part in the error logs, it doesn't
seem to be right.

In such a situation, I'd try to find the root cause of the problem by
trying other setups.

Maybe you can:

1) see if it is the repository
- make a new empty repository, and add trunk & branches folders
- add this new repository in you svn-access-file like:
  @developers = rw
- do an svn copy http://xyz.com/repos/newrepo/trunk
http://xyz.com/repos/newrepo/branches/1 -m "test branch"

2) check the ldap part
- make a new location in your apache config file, but without ldap
<Location /svn>
   DAV svn
   SVNPath /svn/newrepo
   AuthzSVNAccessFile /svn/svn-newrepo-access-file
   AuthType Basic
   AuthName "Subversion repository"
   AuthUserFile /svn/svn-newrepo-auth-file
   Require valid-user
- make a new svn-access-file with only this:
developers = user1

@developers = rw
- you have to create a user in the /etc/svn-auth-file also
>htpasswd -c /svn/svn-newrepo-auth-file user1 password

3) btw, what's the version of your svn client?
        what's the version of your mod_dav_svn?

4) try to install SVN on another machine,
   try putting the repositories in another folder
   check that the apache user has full rights on the svn folder
   try running svnserve instead of apache
   ( I know these don't seem to be relevant, you never know )

Hope some of this helps before your forehead explodes :))



-----Original Message-----
From: news [mailto:news@sea.gmane.org] On Behalf Of Eric Eickhoff
Sent: donderdag 7 juli 2005 18:49
To: users@subversion.tigris.org
Subject: Re: AuthzSVNAccessFile and branching

Thanks Lieven!

I am definitely at a loss here. I don't know what I am missing. A flat
spot is forming on my forehead from beating it against my desk!

To answer your questions: (inline)

"Lieven Govaerts" <lgo@mobsol.be> wrote in message
> Eric,
> I don't have answers, just some remarks:
> 1. in the log:
> [Wed Jul 06 09:41:21 2005] [error] [client] Access denied:
> '(null)' COPY landfill:/branches/1.0/trunk
> landfill:/branches/1.0/trunk
> there is (null) where the username should be filled in, did you do
> this manually or was it the original error log? If this is like it
> appeared in the log it sure is a problem.

  No, I didn't do this manually. It appears that the username is being
'dropped' during the COPY command. For example, when I issue the svn copy
command, here is the access_log entries:

------------------------- - - [07/Jul/2005:11:25:28 -0500] "PROPFIND /repos/landfill
HTTP/1.1" 401 543 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND /repos/landfill
HTTP/1.1" 207 659 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
/repos/landfill/!svn/vcc/default HTTP/1.1" 207 411 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
/repos/landfill/!svn/bln/25 HTTP/1.1" 207 464 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
/repos/landfill/trunk HTTP/1.1" 207 698 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
/repos/landfill/!svn/vcc/default HTTP/1.1" 207 464 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
/repos/landfill/!svn/bc/25/trunk HTTP/1.1" 207 709 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
/repos/landfill/branches/3.0 HTTP/1.1" 404 367 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
/repos/landfill/branches HTTP/1.1" 207 704 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
/repos/landfill/!svn/vcc/default HTTP/1.1" 207 464 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
/repos/landfill/!svn/bc/25/branches/3.0 HTTP/1.1" 404 378 - user1 [07/Jul/2005:11:25:28 -0500] "OPTIONS /repos/landfill
HTTP/1.1" 200 194 - user1 [07/Jul/2005:11:25:28 -0500] "MKACTIVITY
/repos/landfill/!svn/act/3cf0eec3-51fb-0310-a5ca-c8092b0b7386 HTTP/1.1" 201
377 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND /repos/landfill
HTTP/1.1" 207 444 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
/repos/landfill/!svn/vcc/default HTTP/1.1" 207 411 - user1 [07/Jul/2005:11:25:28 -0500] "CHECKOUT
/repos/landfill/!svn/bln/25 HTTP/1.1" 201 392 - user1 [07/Jul/2005:11:25:28 -0500] "PROPPATCH
/repos/landfill/!svn/wbl/3cf0eec3-51fb-0310-a5ca-c8092b0b7386/25 HTTP/1.1"
207 360 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND /repos/landfill
HTTP/1.1" 207 396 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
/repos/landfill/branches HTTP/1.1" 207 704 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
/repos/landfill/!svn/vcc/default HTTP/1.1" 207 464 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
/repos/landfill/!svn/bc/25/branches HTTP/1.1" 207 424 - user1 [07/Jul/2005:11:25:28 -0500] "CHECKOUT
/repos/landfill/!svn/ver/25/branches HTTP/1.1" 201 398 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
/repos/landfill/trunk HTTP/1.1" 207 698 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
/repos/landfill/!svn/vcc/default HTTP/1.1" 207 464 - user1 [07/Jul/2005:11:25:28 -0500] "COPY
/repos/landfill/!svn/bc/25/trunk HTTP/1.1" 401 348

There error_log contains the same a posted before:

[Thu Jul 07 11:25:28 2005] [error] [client] Access denied:
'(null)' COPY landfill:/branches/3.0 landfill:/branches/3.0 [Thu Jul 07
11:25:28 2005] [error] [client] Access denied:
'(null)' COPY landfill:/branches/3.0 landfill:/branches/3.0 [Thu Jul 07
11:25:28 2005] [error] [client] Access denied:
'(null)' COPY landfill:/branches/3.0 landfill:/branches/3.0


From the access_log, it appears that it has the username (user1) during the
COPY, but it receives the 401 response and then I get the entries in the
error_log indicating the 'null' for username. Is it getting dropped

> 2. Your log and the error show that svn is trying to create a trunk
> folder inside the branches/1.0 folder, so I guess the branches/1.0
> folder was already created? Try deleting it first, or create another
> ( probably was part of the example? )

  attempted to create several unique branches -- same result for all

> 3. I'm not sure about the:
> Options Indexes FollowSymLinks
> AllowOverride None
> order allow,deny
> allow from all
> part, but I copied this in my own apache conf, without problems. Why
> do you need this?

These entries were part of a sample config I found (I had to teach myself
Linux in order to implement Subversion -- Linux was required by my boss --
anyway, I am not sure about those entries) I commented them out and still
received the same results

> 4. I do all my testing and production with Subversion 1.2, my logs
> show some differences in comparison to yours:
> C:\temp>svn copy http://mobsol.be/svn/public/trunk
> http://mobsol.be/svn/public/b ranches/1.0 -m "branch 1.0" --username
> lgo [Wed Jul 06 19:39:48 2005] [error] [client] Access
> denied:
> 'lgo' CHECKOUT public:/branches
> [Wed Jul 06 19:39:51 2005] [error] [client] Access denied:
> 'lgo' CHECKOUT public:/branches
> It shows the CHECKOUT command instead of COPY. I'm not sure what this
> means.
> Maybe you can upgrade your testenvironment to 1.2 ( or 1.2.1 ) to see
> what happens there?

I performed the upgrade to 1.2.1 and still receive the same results. The
access and error_logs in response #1 are from 1.2.1

> 5. And maybe the obvious question: try to specify --username & --password
> with your
> svn copy command, so you're really sure which account you're using. And
> check if
> this account is truly in the developers group.

Tried specifying the username and password and no change. I am pretty
confident that it is picking up the username correctly as it is reflected in

the access_logs.

> Lieven.


No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.323 / Virus Database: 267.8.9/42 - Release Date: 6/07/2005
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Thu Jul 7 23:58:05 2005

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.