[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: RE: Re: Limiting access through Apache

From: Brian Erickson <erickson_at_BAUERCONTROLS.com>
Date: 2007-08-09 21:07:57 CEST

Got it!

The problem turned out to be in the httpd.conf file. I added:
   SSPIOmitDomain On
and now all is well.

Thanks for taking the time to look at this...
Brian

> -----Original Message-----
> From: Brian Erickson [mailto:erickson@bauercontrols.com]
> Sent: Thursday, August 09, 2007 2:22 PM
> To: Feldt, Everett; Gaurav Kothiyal
> Cc: users@subversion.tigris.org
> Subject: RE: Re: Limiting access through Apache
>
> The groups used to be of the form user1, BAUERCONTROLS\USER1.
> It was a pain because the user 'user1' would always fail and
> was the first one tried. Then logging in as
> BAUERCONTROLS\USER1 would work.
>
> What I noticed in the httpd.conf file was that the SSPIDomain
> was set to DOMAIN. I changed it to BAUERCONTROLS and then I
> could log in as erickson. Making the BAUERCONTROLS\ERICKSON
> not necessary.
>
> In any case, having both forms doesn't help. FWIW: If you
> can't log in to the BAUERCONTROLS domain, you get no access
> no matter what the svnaccess.conf file says.
>
> This is what I get...
>
> Sending test.txt
> svn: Commit failed (details follow):
> svn: CHECKOUT of '/svn/test/!svn/ver/7/test.txt': 403 Forbidden
> (http://snidely)
>
> svn: Your commit message was left in a temporary file:
> svn: 'D:/junk/svn/test/svn-commit.tmp'
>
> Brian
>
> > -----Original Message-----
> > From: Feldt, Everett [mailto:efeldt@unitech1.com]
> > Sent: Thursday, August 09, 2007 1:35 PM
> > To: Gaurav Kothiyal; Brian Erickson
> > Cc: users@subversion.tigris.org
> > Subject: RE: Re: Limiting access through Apache
> >
> > You may also wish to use the directive
> >
> > SSPIUsernameCase lower
> >
> >
> > -Everett
> >
> > -----Original Message-----
> > From: Gaurav Kothiyal [mailto:kothiyal@gmail.com]
> > Sent: Thursday, August 09, 2007 1:00 PM
> > To: Brian Erickson
> > Cc: users@subversion.tigris.org
> > Subject: Re: Limiting access through Apache
> >
> > I think your svn access file should look like this
> >
> > groups = user1, BAUERCONTROLS\user1 , user2, BAUERCONTROLS\user2
> >
> > What kind of error it is throwing
> >
> > Gaurav
> >
> >
> > On 8/9/07, Brian Erickson <erickson@bauercontrols.com> wrote:
> > > Hi all,
> > >
> > > I'm got an authentication problem that I can't seem to solve...
> > >
> > > I'm using Apache on a Windows XP box.
> > >
> > > The location section in the httpd.conf file looks like:
> > >
> > > <Location /svn>
> > > DAV svn
> > > SVNListParentPath on
> > > SVNParentPath "D:\svn"
> > >
> > > AuthName "Subversion on Snidely"
> > >
> > > AuthName "Subversion Authentication"
> > > AuthType SSPI
> > > SSPIAuth On
> > > SSPIAuthoritative On
> > > SSPIDomain BAUERCONTROLS
> > > SSPIOfferBasic On
> > > Require valid-user
> > >
> > > AuthzSVNAccessFile "D:\SubVersion\svnaccess.conf"
> > > </Location>
> > >
> > > The svnaccess.conf file looks like:
> > > [groups]
> > > pcsdevelopers=garyc, kevin, robertson, kriesel, anderson,
> > qi, gourlay,
> > > erickson admins=dusseau, librarian, administrator
> > >
> > > [/]
> > > *=rw
> > > @admins=rw
> > >
> > > [pcs:/]
> > > @pcsdevelopers=rw
> > >
> > > [test:/]
> > > @pcsdevelopers=rw
> > >
> > >
> > > I know that the '*=rw' line gives everyone read and write
> access to
> > the
> > > repository. However, if I remove the 'w' then no one can commit
> > > anything. It's like the group stuff is being ignored. I've also
> > tried
> > > not using groups and using specfic user names but that
> didn't help
> > > either.
> > >
> > > Any ideas?
> > >
> > > Thanks,
> > > Brian
> > >
> > >
> > >
> >
> ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > > For additional commands, e-mail: users-help@subversion.tigris.org
> > >
> > >
> >
> >
> > --
> > Gaurav Kothiyal
> >
> >
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > For additional commands, e-mail: users-help@subversion.tigris.org
> >
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Thu Aug 9 21:08:44 2007

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.