[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: Re: Limiting access through Apache

From: Brian Erickson <erickson_at_BAUERCONTROLS.com>
Date: 2007-08-09 20:21:45 CEST

The groups used to be of the form user1, BAUERCONTROLS\USER1. It was a
pain because the user 'user1' would always fail and was the first one
tried. Then logging in as BAUERCONTROLS\USER1 would work.

What I noticed in the httpd.conf file was that the SSPIDomain was set to
DOMAIN. I changed it to BAUERCONTROLS and then I could log in as
erickson. Making the BAUERCONTROLS\ERICKSON not necessary.

In any case, having both forms doesn't help. FWIW: If you can't log in
to the BAUERCONTROLS domain, you get no access no matter what the
svnaccess.conf file says.

This is what I get...

Sending test.txt
svn: Commit failed (details follow):
svn: CHECKOUT of '/svn/test/!svn/ver/7/test.txt': 403 Forbidden
(http://snidely)

svn: Your commit message was left in a temporary file:
svn: 'D:/junk/svn/test/svn-commit.tmp'

Brian

> -----Original Message-----
> From: Feldt, Everett [mailto:efeldt@unitech1.com]
> Sent: Thursday, August 09, 2007 1:35 PM
> To: Gaurav Kothiyal; Brian Erickson
> Cc: users@subversion.tigris.org
> Subject: RE: Re: Limiting access through Apache
>
> You may also wish to use the directive
>
> SSPIUsernameCase lower
>
>
> -Everett
>
> -----Original Message-----
> From: Gaurav Kothiyal [mailto:kothiyal@gmail.com]
> Sent: Thursday, August 09, 2007 1:00 PM
> To: Brian Erickson
> Cc: users@subversion.tigris.org
> Subject: Re: Limiting access through Apache
>
> I think your svn access file should look like this
>
> groups = user1, BAUERCONTROLS\user1 , user2, BAUERCONTROLS\user2
>
> What kind of error it is throwing
>
> Gaurav
>
>
> On 8/9/07, Brian Erickson <erickson@bauercontrols.com> wrote:
> > Hi all,
> >
> > I'm got an authentication problem that I can't seem to solve...
> >
> > I'm using Apache on a Windows XP box.
> >
> > The location section in the httpd.conf file looks like:
> >
> > <Location /svn>
> > DAV svn
> > SVNListParentPath on
> > SVNParentPath "D:\svn"
> >
> > AuthName "Subversion on Snidely"
> >
> > AuthName "Subversion Authentication"
> > AuthType SSPI
> > SSPIAuth On
> > SSPIAuthoritative On
> > SSPIDomain BAUERCONTROLS
> > SSPIOfferBasic On
> > Require valid-user
> >
> > AuthzSVNAccessFile "D:\SubVersion\svnaccess.conf"
> > </Location>
> >
> > The svnaccess.conf file looks like:
> > [groups]
> > pcsdevelopers=garyc, kevin, robertson, kriesel, anderson,
> qi, gourlay,
> > erickson admins=dusseau, librarian, administrator
> >
> > [/]
> > *=rw
> > @admins=rw
> >
> > [pcs:/]
> > @pcsdevelopers=rw
> >
> > [test:/]
> > @pcsdevelopers=rw
> >
> >
> > I know that the '*=rw' line gives everyone read and write access to
> the
> > repository. However, if I remove the 'w' then no one can commit
> > anything. It's like the group stuff is being ignored. I've also
> tried
> > not using groups and using specfic user names but that didn't help
> > either.
> >
> > Any ideas?
> >
> > Thanks,
> > Brian
> >
> >
> >
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > For additional commands, e-mail: users-help@subversion.tigris.org
> >
> >
>
>
> --
> Gaurav Kothiyal
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Thu Aug 9 20:22:40 2007

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.