RE: Trouble with authorization

> From: K F [mailto:cmkforce_at_yahoo.com] 
> Sent: 05 May 2010 20:43
> 
> The repo in on a Unix box located at svnrepo/sandbox 
> accessing via tortoise on a windows machine with the latest 
> releases. When I try to do a commit as user dev1, psswd dev1, 
> I get the following error:
>  
> Command: Commit 
> Error: Commit failed (details follow):  
> Error: Authorization failed  
> Finished!:   
>  
> I am not sure what is wrong. I did some searching on the web 
> and can't find anything wrong with what I am doing. Here is 
> what I have in the pertinent files.
>  
> passwd file:
> dev1 = dev1
> dev2 = dev2
> dev3 = dev3
>  
> authz file:
> [aliases]
>  
> [groups]
> deva = dev1, dev2
> devb = dev3
>  
> [svnrepo/sandbox:/]
> deva = rw
> devb = r

Personally I had some issues with using [groups] that I unfotunately did
not have time to resolve.  I suggest that you start by using the
usernames (dev1 etc) directly in the authz file to test:

Also, I think that [svnrepo/sandbox:/] is wrong.  I would only ever
expect to see one name before the slash (a specific repo in a parentpath
setup) then the path within the repo comes after the ":/".  

[sandbox:/]
dev1 = rw
dev2 = rw
dev3 = r

If you only have one repo / are not using parentpath then you can just
set the default global access level:

[/]
dev1 = rw
dev2 = rw
dev3 = r

Are you using parentpath in your setup?  Unless your client is 1.6.11+,
you need to grant read access to the root (you do seem to be doing that,
just thought it worth mentioning).

Finally, a link to path-based authorization in the nightly red book:
http://svnbook.red-bean.com/nightly/en/svn.serverconfig.pathbasedauthz.html

~ mark c

> svnserve.conf file:
> [general]
> anon-access=none
> auth-access=write
>  
> password-db=passwd
>  
> authz-db=authz
>

Mark,

I looked at the link you offered for Path-Based Authorization and really didn't see anything that I haven't tried. Based on your suggestions, to get it to work I am not using groups and am simply using the usernames.

[/]
dev1 = rw
dev2 = rw
dev3 = r

As you can see I am also using the global level access. This all seems to work. I would still like to try and get the groups to work if anyone has any other ideas.

Thanks,
Rich
Received on 2010-05-06 14:36:24 CEST