On Thu, Jan 17, 2013 at 11:42 PM, Trent Fisher <trent.fisher_at_oracle.com> wrote:
> I am working to upgrade my servers to SVN 1.7.8 and just ran into a weird
> issue. If I look at the repository via the web, it shows up as empty. At
> first I thought it was something with the repos-web stylesheet I'm using,
> but looking at the page source I see this:
>
> <svn version="1.7.8 (r1419691)"
> href="http://subversion.apache.org/">
> <index rev="119763" path="/" base="foobar">
> </index>
> </svn>
>
> But if I use that exact same URL on the command line, it works as I expect:
>
> $ svn ls https://adc4110316.us.oracle.com/svn/foobar/
> README
> branches/
> tags/
> trunk/
>
> Furthermore my WebSVN pages show the repository correctly, so this isn't a
> show-stopper. If I access a subdirectory it works correctly via all three
> methods.
>
> FYI, here's my apache config (slightly redacted) for that repository (this
> is the exact same config I'm using for my 1.6 servers):
>
> <Location /svn/foobar>
> DAV svn
> SVNPath /scm/svn/repos/foobar
> SVNIndexXSLT "/repos-web/view/repos.xsl"
> SVNPathAuthz on
> AuthzSVNAccessFile /scm/svn/repos/foobar/conf/authz
> AuthType Basic
> AuthLDAPURL ldap://[...]
> AuthzLDAPAuthoritative On
> Require valid-user
> Satisfy Any
> </Location>
>
> The authz file contains only "[/]" and "$authenticated = r", so I certainly
> should be able to read it.
>
> After a bit more testing, I think I figured it out. When I access the top
> of the repository, it does not request authentication via the web (and,
> thus, gives me an empty page since anonymous access is not permitted), but
> it does request authentication via the svn client and websvn. But if I
> access a subdirectory, it requests authentication in all three cases and
> works as expected. However, my SVN 1.6 server will request authentication
> in all cases. So this seems to be a change in 1.7, is it a bug or something
> that changed in 1.7 and requires config file changes?
I don't know the details, but I have seen some discussions on the
dev-list which seem to be related to this. I think the relevant part
starts here:
http://svn.haxx.se/dev/archive-2012-10/0268.shtml
(or some other posts which you can find by searching the archives on
"Authz on Collection of Repositories").
I think this has recently been fixed on trunk. See this line in the
CHANGES file on trunk:
* SVNParentPath / repository listing now authz-filtered (r1408184)
So if that's your issue, it will probably be fixed in 1.8.
--
Johan
Received on 2013-01-18 12:05:38 CET