[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: AuthLDAP + AuthzSVNAccessFile

From: Manuel Vacelet <manuel.vacelet_at_gmail.com>
Date: 2007-07-20 17:03:50 CEST

I think you was talking about:
http://svnbook.red-bean.com/nightly/en/svn.serverconfig.httpd.html#svn.serverconfig.httpd.authz

And the example in the book works perfectly (require valid-user). But
as soon as you try to be a little bit more precise (Require user) it
fails :/

Moreover it's not a question of whether LDAP is authoritative or not
(It's "on" by default BTW) because I have the same behaviour with
AuthFile.

I will ask on users@httpd if there are differences between "Require
valid-user" and "Require user".

Cheers,
Manuel

On 7/20/07, ossi petz <ossipetz@hallo.ms> wrote:
> hallo
>
> indeed. but once you see both apache and subversion as two seperate
> modules it may become clearer:
>
> if AuthSth + Require valid-user fails, apache will send you a
> unauthorized response. subversion specific settings do not come into
> play at all. so case one seems ok.
>
> if require user somone fails i dont get the point of anonymous access too.
>
> i remember there was a section on anonymous access in the subversion
> manual. since apache can use mutliple auth methods (ldap, basic, pam)
> and ldap auth is not authoritative (something like that) apache may
> continues to try to authenticate
>
> but the book should give an example somewhere?
>
>
> and yes: apache auth sometimes gives some riddles from time to time :)
>
>
>
>
> Manuel Vacelet schrieb:
> > Actually I still have a question.
> >
> > If the apache authentication faild with "AuthSth + Require valid-user"
> > I'm not allowed to see the content of the repository.
> > but if it's "AuthSth + Require user someone", there is an anonymous
> > access and I can read the content of the repository even if I'm not
> > "someone".
> >
> > That seems a strange logic for me...
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Jul 20 17:03:11 2007

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.