Re: Restricting access

The authz file's repository specification is relative to the parent path
specified to svnserve via the -r
option.

for e.g.

$ ls ~/svnrroots
svnroot1 svnroot2

$ svnserve -d -r ~/svnroots/

Then authz file could contain:

[svnroot1:/bar]
rahul = w

So make sure you are specifying the correct root to svnserve

Adrian Marsh wrote:
> Anyone have an idea for this??
>
>
>
>
> -----Original Message-----
> From: Adrian Marsh [mailto:Adrian.Marsh@ubiquisys.com]
> Sent: 07 March 2007 14:55
> To: users@subversion.tigris.org
> Subject: Restricting access
>
> Hi,
>
> I've an SVN server, accessed by svn+ssh, with 2 repositories. I'd like
> to control access to the repositories.
>
> The SSH config includes the setup to specify the tunnel user, eg:
>
> command="/usr/local/bin/svnserve -t
> --tunnel-user=marsh",no-port-forwarding,no-agent-forwarding,no-X11-forwa
> rding,no-pty
>
>
> My svnserve.conf file has:
>
> -----
> [general]
> anon-access = none
> auth-access = write
> authz-db = authz
> realm = test_r
> -----
>
> My authz file has:
>
> -----
> [groups]
> test_group = marsh
>
> [/]
> @test_group = r
> -----
>
>
> This config works ok, and user "marsh" has r/o access to the repository.
> However I want to use the same authz file for 2 repositories
> (changing "authz-db = authz" to "authz-db = /somedir/authz")
>
> So I thought that I'd need to specify the realm in the authz file, and
> then later on add a second realm config:
>
>
> -----
> [groups]
> test_group = marsh
>
> [test_r:/]
> @test_group = r
> -----
>
> But instead I get an authorisation failure.
>
> NB: At this point, both authz and svnserv.conf are in the same conf/
> directory under one repository.
>
> The full unix path to the repo is /svn/test_abc, so does the [test_r:/]
> refer to the root of the repository - OR - the unix filepath ?
>
>
> What did I miss??
>
>
> Adrian
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>
>

-- 
Rahul Bhargava
http://www.rahulbhargava.org
Phone: (925) 265-8801(W)|895-2201(M)
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org