[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Can't figure out authzfile syntax for subdirectory access control

From: <Mathias.Weinert_at_gfa-net.de>
Date: 2006-05-02 11:28:23 CEST

Edward Bosco wrote:

> New stuff at end of original message.
> Ssl_access_log; upgraded Debian svn to 1.3.1-2
>
> -----Original Message-----
> From: Edward Bosco
> Sent: Monday, May 01, 2006 12:05 PM
> To: 'Xn Nooby'; Mathias.Weinert@gfa-net.de
> Cc: users@subversion.tigris.org
> Subject: Re: Can't figure out authzfile syntax for subdirectory access
> control
>
> Xn Nooby, Mathias -
>
> Been following this thread, and implementing the path-based
> authorization. Can't get particular paths to _not_ be accessible.
>
> With svn 1.3.1 on a Windows XP machine, accessing an existing repository
> on a Debian Sarge server running 1.2.3, I can't keep
> a test user from accessing directories or files they ought not to be
> able to access.
>
> My dav_svn.conf file looks like:
>
> <Location /svn2>
> DAV svn
> SVNPath /var/repos/repos/testrepo
> Allow from All
> Satisfy Any
> SVNPathAuthz on
> AuthType Basic
> AuthUserFile /etc/apache2/users
> AuthName "Test Repository"
> AuthzSVNAccessFile /etc/apache2/authz
> Require valid-user
> </Location>
>

Hi Edward,

please note that Xn Nooby was talking about the svnserve authz
configuration while you are using the dav_svn module.
Unfortunately I am only used to svnserve so I can't help you
here. Sorry.

> My authz file looks like:
> [groups]
> reatssdvp = ebosco, kwest
> testdvp = test
[...]
> [/simulations]
> * =
> @reatssdvp = rw
>
> ==
> Using a command line invocation of svn:
> C:\Documents and Settings\ebosco>svn ls
> https://reatss.prologic-inc.com/svn2/testrepo/core --username test
> --password test --no-auth
> -cache
> I still get a listing of a directory I ought not see; same holds for svn
> log or whatever.

With svnserve it is normal that you see all directories but you
can't access them (if configured poperly).

>
> Any thoughts as how to proceed? Xn, were you able to limit access to
> subdirectories?
>
> ==========
>
> Upgraded the Debian server svn to 1.3.1-2; still get the same symptoms;
> can't limit access to subdirectories.
>
[...]

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Tue May 2 11:29:39 2006

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.