[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Access control authz + ssh + ldap

From: Jehan PROCACCIA <Jehan.Procaccia_at_int-evry.fr>
Date: 2006-10-09 12:36:26 CEST

hello

I want to get a fine grained acces control over projects in the
repositories. I 've seen that the authz_svn_module
could be used to do that. Here's how I used it

<Location /svn/s2ia>
   DAV svn
   SVNParentPath /var/www/svn
   AuthzSVNAccessFile /var/www/svn/s2ia/conf/authz
</Location>

Now when I access my repository I get :
<C:error/> <m:human-readable errcode="2"> Could not open the requested
SVN filesystem </m:human-readable>
httpd runs as apache user and apache:apache owns all the directory tree
below /var/www/snv !
Here's what I've set in my /var/www/svn/s2ia/conf/authz file
[/]
* = r
[/progs]
procacci = rw
tutu =
what's wrong

More generally , is it possible to get ride of authz and taking care of
access controls with simple Unix filesystem modes (rwx ...) ?
In fact I don't understand How I can combine DAV access controled by
(authz_svn_module) and svn+ssh command line clients ? will they also be
restricted by the same conf/authz file ?
Actually all my users are already in a ldap directory and I would like
to manage access control without recreating groups and have a single
access control mechanism over DAV clients and ssh clients !.

Any simple howtos on that subject ?

thanks.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Mon Oct 9 12:36:55 2006

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.