[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: AuthzSVNAccessFile and branching

From: Eric Eickhoff <ejeickhoff_at_sigma-micro.com>
Date: 2005-07-12 19:18:21 CEST

Well, unfortunately, I found no solution to this.

I ended up wiping my box--reinstalling RH and reloading everything and now
it is working as expected.

Thanks Lieven for your help.

-Eric

"Lieven Govaerts" <lgo@mobsol.be> wrote in message
news:20050707215513.B6ED03808C@apate.telenet-ops.be...
> Eric,
>
>
> I'm out of the useful things to test, maybe someone else on this list
> can help? This should be and probably is a trivial thing, but I don't
> see it.
> I'm still not sure about the (null) part in the error logs, it doesn't
> seem to be right.
>
> In such a situation, I'd try to find the root cause of the problem by
> trying other setups.
>
> Maybe you can:
>
> 1) see if it is the repository
> - make a new empty repository, and add trunk & branches folders
> - add this new repository in you svn-access-file like:
> [newrepo:/]
> @developers = rw
> - do an svn copy http://xyz.com/repos/newrepo/trunk
> http://xyz.com/repos/newrepo/branches/1 -m "test branch"
>
> 2) check the ldap part
> - make a new location in your apache config file, but without ldap
> <Location /svn>
> DAV svn
> SVNPath /svn/newrepo
> AuthzSVNAccessFile /svn/svn-newrepo-access-file
> AuthType Basic
> AuthName "Subversion repository"
> AuthUserFile /svn/svn-newrepo-auth-file
> Require valid-user
> </Location>
> - make a new svn-access-file with only this:
> [groups]
> developers = user1
>
> [newrepo:/]
> @developers = rw
> - you have to create a user in the /etc/svn-auth-file also
>>htpasswd -c /svn/svn-newrepo-auth-file user1 password
>
> 3) btw, what's the version of your svn client?
> what's the version of your mod_dav_svn?
>
> 4) try to install SVN on another machine,
> try putting the repositories in another folder
> check that the apache user has full rights on the svn folder
> try running svnserve instead of apache
> ...
> ( I know these don't seem to be relevant, you never know )
>
> Hope some of this helps before your forehead explodes :))
>
> Lieven.
>
>
>
> -----Original Message-----
> From: news [mailto:news@sea.gmane.org] On Behalf Of Eric Eickhoff
> Sent: donderdag 7 juli 2005 18:49
> To: users@subversion.tigris.org
> Subject: Re: AuthzSVNAccessFile and branching
>
> Thanks Lieven!
>
> I am definitely at a loss here. I don't know what I am missing. A flat
> spot is forming on my forehead from beating it against my desk!
>
> To answer your questions: (inline)
>
>
> "Lieven Govaerts" <lgo@mobsol.be> wrote in message
> news:20050706175115.ADE3219819D@europa.telenet-ops.be...
>> Eric,
>>
>> I don't have answers, just some remarks:
>>
>> 1. in the log:
>>
>> [Wed Jul 06 09:41:21 2005] [error] [client 10.31.1.21] Access denied:
>> '(null)' COPY landfill:/branches/1.0/trunk
>> landfill:/branches/1.0/trunk
>>
>> there is (null) where the username should be filled in, did you do
>> this manually or was it the original error log? If this is like it
>> appeared in the log it sure is a problem.
>>
>
> No, I didn't do this manually. It appears that the username is being
> 'dropped' during the COPY command. For example, when I issue the svn copy
> command, here is the access_log entries:
>
> -------------------------
> 10.31.1.21 - - [07/Jul/2005:11:25:28 -0500] "PROPFIND /repos/landfill
> HTTP/1.1" 401 543
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND /repos/landfill
> HTTP/1.1" 207 659
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
> /repos/landfill/!svn/vcc/default HTTP/1.1" 207 411
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
> /repos/landfill/!svn/bln/25 HTTP/1.1" 207 464
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
> /repos/landfill/trunk HTTP/1.1" 207 698
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
> /repos/landfill/!svn/vcc/default HTTP/1.1" 207 464
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
> /repos/landfill/!svn/bc/25/trunk HTTP/1.1" 207 709
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
> /repos/landfill/branches/3.0 HTTP/1.1" 404 367
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
> /repos/landfill/branches HTTP/1.1" 207 704
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
> /repos/landfill/!svn/vcc/default HTTP/1.1" 207 464
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
> /repos/landfill/!svn/bc/25/branches/3.0 HTTP/1.1" 404 378
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "OPTIONS /repos/landfill
> HTTP/1.1" 200 194
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "MKACTIVITY
> /repos/landfill/!svn/act/3cf0eec3-51fb-0310-a5ca-c8092b0b7386 HTTP/1.1"
> 201
> 377
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND /repos/landfill
> HTTP/1.1" 207 444
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
> /repos/landfill/!svn/vcc/default HTTP/1.1" 207 411
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "CHECKOUT
> /repos/landfill/!svn/bln/25 HTTP/1.1" 201 392
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPPATCH
> /repos/landfill/!svn/wbl/3cf0eec3-51fb-0310-a5ca-c8092b0b7386/25 HTTP/1.1"
> 207 360
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND /repos/landfill
> HTTP/1.1" 207 396
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
> /repos/landfill/branches HTTP/1.1" 207 704
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
> /repos/landfill/!svn/vcc/default HTTP/1.1" 207 464
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
> /repos/landfill/!svn/bc/25/branches HTTP/1.1" 207 424
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "CHECKOUT
> /repos/landfill/!svn/ver/25/branches HTTP/1.1" 201 398
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
> /repos/landfill/trunk HTTP/1.1" 207 698
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "PROPFIND
> /repos/landfill/!svn/vcc/default HTTP/1.1" 207 464
> 10.31.1.21 - user1 [07/Jul/2005:11:25:28 -0500] "COPY
> /repos/landfill/!svn/bc/25/trunk HTTP/1.1" 401 348
> ------------------------------
>
> There error_log contains the same a posted before:
>
> [Thu Jul 07 11:25:28 2005] [error] [client 10.31.1.21] Access denied:
> '(null)' COPY landfill:/branches/3.0 landfill:/branches/3.0 [Thu Jul 07
> 11:25:28 2005] [error] [client 10.31.1.21] Access denied:
> '(null)' COPY landfill:/branches/3.0 landfill:/branches/3.0 [Thu Jul 07
> 11:25:28 2005] [error] [client 10.31.1.21] Access denied:
> '(null)' COPY landfill:/branches/3.0 landfill:/branches/3.0
>
> -------------------------
>
> From the access_log, it appears that it has the username (user1) during
> the
> COPY, but it receives the 401 response and then I get the entries in the
> error_log indicating the 'null' for username. Is it getting dropped
> somewhere??
>
>> 2. Your log and the error show that svn is trying to create a trunk
>> folder inside the branches/1.0 folder, so I guess the branches/1.0
>> folder was already created? Try deleting it first, or create another
> branch.
>> ( probably was part of the example? )
>>
>
> attempted to create several unique branches -- same result for all
>
>
>> 3. I'm not sure about the:
>> Options Indexes FollowSymLinks
>> AllowOverride None
>> order allow,deny
>> allow from all
>> part, but I copied this in my own apache conf, without problems. Why
>> do you need this?
>>
>
> These entries were part of a sample config I found (I had to teach myself
> Linux in order to implement Subversion -- Linux was required by my boss --
> anyway, I am not sure about those entries) I commented them out and still
> received the same results
>
>> 4. I do all my testing and production with Subversion 1.2, my logs
>> show some differences in comparison to yours:
>> C:\temp>svn copy http://mobsol.be/svn/public/trunk
>> http://mobsol.be/svn/public/b ranches/1.0 -m "branch 1.0" --username
>> lgo [Wed Jul 06 19:39:48 2005] [error] [client 84.195.197.106] Access
>> denied:
>> 'lgo' CHECKOUT public:/branches
>> [Wed Jul 06 19:39:51 2005] [error] [client 84.195.197.106] Access denied:
>> 'lgo' CHECKOUT public:/branches
>>
>> It shows the CHECKOUT command instead of COPY. I'm not sure what this
>> means.
>> Maybe you can upgrade your testenvironment to 1.2 ( or 1.2.1 ) to see
>> what happens there?
>>
>
> I performed the upgrade to 1.2.1 and still receive the same results. The
> access and error_logs in response #1 are from 1.2.1
>
>
>> 5. And maybe the obvious question: try to specify --username & --password
>> with your
>> svn copy command, so you're really sure which account you're using. And
>> check if
>> this account is truly in the developers group.
>>
>
> Tried specifying the username and password and no change. I am pretty
> confident that it is picking up the username correctly as it is reflected
> in
>
> the access_logs.
>
>
>> Lieven.
>
>
>
> --
> No virus found in this outgoing message.
> Checked by AVG Anti-Virus.
> Version: 7.0.323 / Virus Database: 267.8.9/42 - Release Date: 6/07/2005

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Tue Jul 12 19:22:49 2005

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.