Re: AW: Re: Subversion over http (Another problem)!!
From: Himanshu Raina <raina_himanshu_at_yahoo.com>
Date: 2007-01-17 16:16:19 CET
HI,
After making modifications in the httpd.conf directives i am able to access my repositories as per my specifications i.e user from 1 group can access his repository alone and not someone else's.This works fine over http but when i access the same through command line i get the
following error.
svn list http://192.16.1.2/svn/blogs (blogs is one of the repos)
svn: PROPFIND request failed on '/svn/blogs'
svn: PROPFIND of '/svn/blogs': 301 Moved Permanently (http://192.16.1.2)
The httpd.conf directives are given below
<Directory "/usr/local/apache2/htdocs/svn">
AllowOverride AuthConfig
</Directory>
<Location /svn>
DAV svn
SVNListParentPath on
SVNParentPath /usr/local/apache2/htdocs/svn
</Location>
On browser if i give
http://192.16.1.2/svn
I get all the repositories listed and one selecting a repository it asks for id/passwd defined in .htpasswd (path for which is defined in .htaccess) and post authentication lists all the directories.
.htaccess -
AuthName "Basic Authentication Blogs"
AuthType Basic
AuthUserFile /usr/local/apache2/htdocs/svn/.htpasswd
require valid-user
How can i make it work through command line
regards
Himanshu Raina
----- Original Message ----
From: Felix Gilcher <felix.gilcher_at_exozet.com>
To: Himanshu Raina <raina_himanshu_at_yahoo.com>; Norbert Unterberg <nepo_at_gmx.net>; users_at_subversion.tigris.org
Sent: Wednesday, January 17, 2007 2:27:05 PM
Subject: AW: Re: Subversion over http !!
Hi,
> -----Ursprüngliche Nachricht-----
> Von: Himanshu Raina [mailto:raina_himanshu_at_yahoo.com]
> Gesendet: Mittwoch, 17. Januar 2007 09:20
> An: Norbert Unterberg; users_at_subversion.tigris.org
> Betreff: Re: Subversion over http !!
>
>
> HI,
>
> Let me explain again.I have three repositories
> /usr/local/svn/repos1
> /usr/local/svn/repos2
> /usr/local/svn/repos3
> Now when i access this over http
> http://www.myip.com/svn/repos1 - I authenticate and am able
> to see the directory structure.Now if i want to access
> another repository i can simply give
> http://www.myip.com/svn/repos2 and since i am already
> authenticated it won't prompt me for id/password.
> Now coming back to my problem.How can i restrict user from
> one repository to access another repository.I made use of
> .htaccess file and was able to restrict access to
> repositories but post authentication it doesn't list the
> directories and instead gives me an error.
Once again, as Norbert already mentioned read the free subversion book [1], specifically the chapters about "Authentication Options" with http [2] and "Per-Directory Access Control" [3] which explain the available methods of restricting access in great detail. Probably the easiest method is to use an AuthzSVNAccessFile, which is explained in the section "Per-Directory Access Control". If you have any specific questions concerning this setup, feel free to come back to the list.
regards
felix
[1] http://svnbook.red-bean.com/
[2] http://svnbook.red-bean.com/nightly/en/svn.serverconfig.httpd.html#svn.serverconfig.httpd.authn
[3] http://svnbook.red-bean.com/nightly/en/svn.serverconfig.httpd.html#svn.serverconfig.httpd.authz.perdir
>
>
> regards
> Himanshu Raina
>
> ----- Original Message ----
> From: Norbert Unterberg <nepo_at_gmx.net>
> To: users_at_subversion.tigris.org
> Sent: Wednesday, January 17, 2007 12:51:47 PM
> Subject: Re: Subversion over http !!
>
>
> Himanshu Raina schrieb:
>
> > Now if i access it over http i.e
> > http://myip.com/svn/repos1 -- it prompts me for a password and post
> > authentication lists the directories.Since i make use of a single
> > auth-file it doesn't prompt me for another authentication and as a
> > result i can browse through any repository (provided i know
> the repos
> > name)..Is there anyway i can avoid the same.
>
> Yes. Read the subversion book (http://svnbook.red-bean.com/),
> in particular the
> chapter about server configuration --> Per-Directory Access
> Control. You need to
> configure an access file using the AuthzSVNAccessFile directive.
>
> NOrbert
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
> For additional commands, e-mail: users-help_at_subversion.tigris.org
>
>
>
>
> ________________________________
>
> Food fight?
> <http://answers.yahoo.com/dir/index;_ylc=X3oDMTFvbGNhMGE3BF9TA
zM5NjU0NTEwOARfcwMzOTY1NDUxMDMEc2VjA21haWxfdGFnbGluZQRzbGsDbWFpbF90YWcx?link=ask&sid=396545367> Enjoy some healthy > debate
> in the Yahoo! Answers Food & Drink Q&A.
> <http://answers.yahoo.com/dir/index;_ylc=X3oDMTFvbGNhMGE3BF9TA
zM5NjU0NTEwOARfcwMzOTY1NDUxMDMEc2VjA21haWxfdGFnbGluZQRzbGsDbWFpbF90YWcx?link=ask&sid=396545367>
--
Felix Gilcher
Head of IT Development
Exozet Berlin GmbH
Rotherstraße 20
10245 Berlin
eMail: gilcher_at_exozet.com
URL: www.exozet.com
____________________________________________________________________________________
Need a quick answer? Get one in minutes from people who know.
Ask your question on www.Answers.yahoo.com
|
This is an archived mail posted to the Subversion Users mailing list.
This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.