[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Cannot check out public directory with client 1.8.x without access to repo root

From: Mark Tsuchida <marktsuchida_at_gmail.com>
Date: Wed, 21 Aug 2013 22:13:57 -0700

On Wed, Aug 21, 2013 at 12:17 AM, Ivan Zhakov <ivan_at_visualsvn.com> wrote:
> On Wed, Aug 21, 2013 at 4:17 AM, Mark Tsuchida <marktsuchida_at_gmail.com> wrote:
>> On Tue, Aug 20, 2013 at 12:02 AM, Ivan Zhakov <ivan_at_visualsvn.com> wrote:
>>> On Mon, Aug 19, 2013 at 11:14 PM, Ivan Zhakov <ivan_at_visualsvn.com> wrote:
>>>> On Mon, Aug 19, 2013 at 10:19 PM, Mark Tsuchida <marktsuchida_at_gmail.com> wrote:
>> [...]
>>>>> The server is running SVN 1.6.11 (CentOS 6.4) with Apache and TLS.
>>>>> Our repository (let's call it "myrepo") allows public read access (* =
>>>>> r) to myrepo/trunk, but not to myrepo/ (the root). There is also a
>>>>> directory myrepo/trunk/secret to which only specific users have access
>>>>> to.
>>>>>
>>>>> Everything has been working as expected with SVN 1.6 and 1.7 clients:
>>>>> in particular, no username or password is requested when checking out
>>>>> myrepo/trunk.
>>>>>
>>>>> However, with SVN 1.8.0 and 1.8.1 clients, it is not possible to check
>>>>> out any directory without supplying the credentials of a user who has
>>>>> access to the repository root.
>>>>>
>>>>> svn co https://our.server.com/svn/myrepo/trunk -> Requires
>>>>> authentication with client 1.8.x but not with 1.6.x or 1.7.x
>>>>> svn list https://our.server.com/svn/myrepo/trunk -> Works even with 1.8.1
>>>>> svn list https://our.server.com/svn/myrepo -> Requires auth, as expected
[...]
>> Can you perhaps spot an error in my authz and apache configs (please see my
>> reply to Daniel)?
>>
> Did you try replace "Satisfy Any" to "Satisfy All" ?

Yes, we tried that. "Satisfy All" is more stringent and completely
disallows anonymous access (given the "Require valid-user").

> I think at current state you have to options:
> 1. Upgrade server to Subversion 1.8
> 2. Create 'guest' user and disable anonymous access
>
> It sill will be useful to file bug in Subversion issue tracker though.

Thank you for the suggestions. I've filed issue 4416.
http://subversion.tigris.org/issues/show_bug.cgi?id=4416

Best,
Mark
Received on 2013-08-22 07:14:41 CEST

This is an archived mail posted to the Subversion Users mailing list.