[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: configure Virtual host

From: Graham Reed <grahamr_at_algorithmics.com>
Date: 2006-01-27 18:22:29 CET

Ryan Schmidt wrote:
> I don't think that's possible. We tried something similar awhile ago
> and couldn't make it work.

You'd have to have Apache run as root on incoming connections, and then
switch user ID to the authenticated user once HTTP authentication is
done. (Or, very hopefully, switch to the unprivileged user if it isn't.)

Since an important part of securing servers against programming flaws is
to drop to an unprivileged user as soon as possible (or, even better,
never run as root at all), this can't be done. Apache just doesn't run
with sufficient permission to switch to a different user ID.

What you can do if you REALLY want to have each repository accessed by a
different user is run multiple Apache servers on different ports, each
serving a single repository. Then you use a single server on the
default port, generating redirects to the other servers.

But this will play havok with the URLs in copies and things like that, I
believe. I haven't checked to see if the copy command checks the URLs
for redirections first.

-- 
As long as the parent doesn't blow up or otherwise harm the child,
which would, of course, be counterproductive.
		 -- Jamie Hyneman of the Mythbusters
---- The sender is not responsible for any content below this line ----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Jan 27 18:26:40 2006

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.