RE: secure svn

>
> Hi,
>
> How do you have your svn configured?
> Is there a specific command you need? Here is the ldd output:
> libsvn_client-1.so.0 => /usr/local/lib/libsvn_client-1.so.0
>
> Have you turned of non-authenticated access?
> No but how to make sure?
> What you say "the access is for everybody" do you mean read or write
> access?
> access via a browser so it should be read

I really meant the configuration file that specifies your authentication methods. I know with svnserve you use the svnserve.config file in the repository. I think with apache this configuration is done in the httpd.conf file.

Do you have Require valid-user in your <Location> section? For example. If not, then you are allowing non-authenticated access.

The doc on this is here: http://svnbook.red-bean.com/nightly/en/svn-book.html#svn.serverconfig.httpd.authz

BOb

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2390299

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-09-02 17:59:28 CEST