[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

SVNListParentPath access denied problem using LDAP

From: Jeff K <mrjeffk22_at_hotmail.com>
Date: 2007-10-22 19:14:48 CEST

I have been working on this problem for about a week and for the life of me can't figure it out. I am upgrading to SVN 1.4.5 and Apache 2.2 from SVN 1.3.X and Apache 2.0. I am currently using SSPI with Windows AD authentication. On the upgrade, I am now using the Apache provided LDAP authentication. Everything seems to be up and running with one last thing remaining. We used a PHP page before to list all of the repositories on the site; I now want to use the SVNListParentPath directive. However, I get an access denied error once security is applied (i first get prompted for credentials, and then received a 403 forbidden error). The only way I can get this to work is provide read only access to everyone in our AuthzSVNAccessFile. [/] * = r I really don't want read only access for everyone. One "hack" that I know will work is to revoke that access for each repository. Seems like a lot of maintenance going forward. Any ideas on an Apache config that will provide anonymous access to the parent list but still secure the repos? I have tried various regexp in https.conf with no luck. <Location /svn/> DAV svn SVNParentPath e:\svn SVNListParentPath on SVNIndexXSLT "/svnindex.xsl" #auth settings Require valid-user AuthType Basic AuthBasicProvider ldap AuthzLDAPAuthoritative on AuthName "Enter login and password now" AuthLDAPURL "ldap://somedomain.net:389/OU=XXXUsers,DC=yyy,DC=net?sAMAccountName?sub?(objectClass=*)" AuthLDAPBindDN "CN=User,OU=XXXUsers,DC=yyy,DC=net" AuthLDAPBindDN "XXX\user" AuthLDAPBindPassword password AuthzSVNAccessFile e:\svn\access.txt </Location> thanks
jeff
_________________________________________________________________
Climb to the top of the charts!  Play Star Shuffle:  the word scramble challenge with star power.
http://club.live.com/star_shuffle.aspx?icid=starshuffle_wlmailtextlink_oct
Received on Mon Oct 22 19:15:10 2007

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.