[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: apache / subversion / access doesn't follow documented rules?

From: Thomas Beale <thomas_at_deepthought.com.au>
Date: 2005-07-23 16:54:07 CEST

David Anderson wrote:
> Thomas Beale wrote:
>
>> This kind of combination of repositories cannot be that strange - does
>> anyone else have a solution?
>
>
> A combination of SVNParentPath and an authz access control file should
> work. However, I notice you never use the "Satisfy any" directive, which
> indicates to apache to try anonymous access first, and then fallback to
> authenticated access if required. Perhaps this could be the source of
> your problems?

I forgot to mention that when I do what you show below, I get challenged
for username/password even on repositories which have * = r set in the
access control file. But - if I hit cancel on the authentication dialog,
I get another instance of the same dialog, and if I hit cancel on that,
I am in (even if I authenticate properly the first time, I get asked
again)....whereas for the repository which has access control set to
"@webdev-grp = rw" (I am in this group), I get asked only once (as I
should be), and then when I authenticate, I am in - as I should be.

I can't work out apache's logic in determining whether to challenge for
a password (does it consider the access-control settings first?) when
one is not needed, and then allows you in after you refuse to give it -
twice! Very strange.

- thomas beale

>
> Here is the Location block for my server configuration, which works fine
> in the scenario you describe (with the ad-hoc authz file, which you seem
> to have):
>
> <Location /svn>
> DAV svn
> SVNParentPath /var/svn
>
> # Access control policy
> AuthzSVNAccessFile /var/svn/svn.acl
>
> # Anonymous access first, auth if necessary
> Satisfy any
> Require valid-user
>
> # Authentication mechanism
> AuthType Basic
> AuthName "Natulte subversion repositories"
> AuthUserFile /var/svn/svn.auth
> </Location>
>
> Hope that helps,
> - Dave.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Sat Jul 23 16:58:52 2005

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.