[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Anonymous access will not go away!

From: Justin <justin_at_hush.cc>
Date: 2006-08-21 18:04:41 CEST

Hi everyone,

I just set up my first Subversion server, under Apache2 on OS X
Server 10.4, serving the repository over Apache2 and SSL. It was
probably the most painful install and tweaking process I've ever
experienced! But it's in and working.

The problem I'm running into, is that no matter what I do, I cannot
DISABLE anonymous access! I can set things so that an INcorrect
username is denied, and a CORRECT username is allowed. But not
entering any credentials always results in full access.

My httpd.conf location is:

<Location /svn>
        SSLRequireSSL
     DAV svn
     SVNPath /Library/svn
     AuthzSVNAccessFile /Library/Apache2/svn-access-file
     Require valid-user
     AuthType Basic
     AuthName "Repository"
     AuthUserFile /Library/Apache2/svn-auth-file
</Location>

And I've got the svn-access-file as:

[/]
* =
justin = rw

Basically, I've got this ONE repository that I need to be secured.
When I remove my account from the access-file (justin), any anonymous
access results in a 403 Forbidden error. But when I've got my account
in there, my account AND anonymous gets full access.

I have set the hooks for anon-access to none in the svnserve.conf
file in the repository, but I think this is just for serving via
svnserve and NOT Apache2. Regardless, the options that I set there do
nothing.

I'm completely stuck on this one, there doesn't seem to be anything
out there addressing my issue. I'm thinking that maybe it was a
permissions issue on my repository folders and files, but when I
disable the world permissions (from read, write, ex to none, none
none) I cannot access the repository at all.

Any help on this would be GREATLY appreciated!

Thanks in advance,

*justin

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Mon Aug 21 18:34:39 2006

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.