[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: strange error with subversion: "client denied by server configuration: /htdocs"

From: John Pye <john.pye_at_anu.edu.au>
Date: Mon, 18 May 2009 18:44:13 +1000

Hi Ryan

Ryan Schmidt wrote:
> On May 15, 2009, at 03:30, John Pye wrote:
>
>>
>> For *some* clients, we see errors like this:
>>
>> jpye_at_ascend:~$ svn co
>> http://ascendsvn.cheme.cmu.edu/ascend/code/trunk/solvers test1
>> svn: PROPFIND request failed on '/ascend/!svn/vcc/default'
>> svn: PROPFIND of '/ascend/!svn/vcc/default': 403 Forbidden
>> (http://ascendsvn.cheme.cmu.edu)
>>
>> which is accompanied by an error in the Apache logs:
>>
>> [Fri May 15 04:20:58 2009] [error] [client 128.2.52.249] client denied
>> by server configuration: /htdocs
>>
>> but for *other* clients, there is no error at all, and the command works
>> just fine.
>>
>
> What is the DocumentRoot in effect for this VirtualHost? Since one
> isn't defined in the VirtualHost, what is the server's global
> DocumentRoot?

There was none, or it was some sort of default value. I set it manually
to /var/www/svn, and created that folder and made sure it was
world-readable (owner root.root, chmod 755). Then I tried the "svn co"
again, and this time my svn-error.log (as mentioned in the previous
Apache config) now shows the following:

[Mon May 18 04:04:24 2009] [error] [client 128.2.52.249] client denied
by server configuration: /var/www/svn/ascend

This confirms that it the HTTP request is being processed by the correct
<VirtualHost> but also that something strange is happening; the
<Location /ascend> for our ASCEND subversion repository is not being
activated for this particular case, EVEN THOUGH when I do it from
anotehr machine, IT IS, and the request in that case works fine, as
expected.

>
> My thought is that you may be experiencing some variant of this issue,
> wherein your svn path inadvertently overlaps with some path inside the
> DocumentRoot -- or possibly with some global Alias, RedirectMatch,
> RewriteRule or similar directive.
>
> http://subversion.tigris.org/faq.html#http-301-error
>
> Try setting the DocumentRoot to something useful inside the
> VirtualHost, for example to /var/empty or some other empty directory,
> to rule out any conflicts with the server's global DocumentRoot. If
> that doesn't help, examine your server's global Alias, RedirectMatch,
> RewriteRule and similar directives for possible conflicts with the
> path you're trying to check out from svn.

I set DocumentRoot as suggested, but this doesn't solve the error, it
just translates us over to another error message with, presumably, the
same root cause.

I'm on Ubuntu, so I used "a2dissite" to disable all other virtual host
configurations for my server, and I still saw exactly the same problem.

There is a big list of Modules enabled on my system, perhaps I should
try disabling some of these selectively? Which ones would I need to
server SVN over HTTP (not HTTPS)?

root_at_ascend:/etc/apache2# ls mods-enabled/
alias.conf authn_file.load authz_host.load autoindex.load dav_svn.conf
dir.load mime.load negotiation.load rewrite.load ssl.conf status.load
alias.load authz_default.load authz_user.load cgi.load dav_svn.load
env.load mod-evasive.load php5.conf setenvif.conf ssl.load
auth_basic.load authz_groupfile.load autoindex.conf dav.load dir.conf
mime.conf negotiation.conf php5.load setenvif.load status.conf

Turning off all the other sites should have dealt with the issues of
global Alias or other rules causing problems.

The only other thing that occurs to me is that we have our repository
located in our server in /home/svn, which is perhaps non-standard; could
it be that some special handling of the /home directory be tripping the
error? You would have seen that issue elsewhere though, presumably, if
this were possible?

Cheers
JP

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2297803

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-05-18 10:45:19 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.