[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Unable to access our SVN server using SVN 1.8 client

From: Johannes Michler <orgler_at_gmail.com>
Date: Sat, 22 Feb 2014 18:16:11 +0100

Hi,

we're serving a svn repository using Debian 7 and mod_dav_svn.so in apache:
Apache/2.2.22 (Debian) DAV/2 SVN/1.6.17 PHP/5.4.4-14+deb7u7

We want to have all members of a certain ldap-group to have full access.
Furthermore, some users from the ldap-directory not in that group shall
have access to certain paths. So our setup is:

<Location /svn>
  DAV svn
  SVNPath /data1/svn
     AuthName "SVN Authentifizierung"
     AuthType Basic
     AuthBasicProvider ldap
     AuthLDAPUrl
ldap://LDAP-SERVER:389/CN=Users,DC=intern,DC=nixda,DC=de?sAMAccountName
     AuthLDAPBindDN "binduser"
     AuthLDAPBindPassword password
     AuthLDAPGroupAttributeIsDN on
     Require ldap-group CN=Mitarbeiter,CN=Users,DC=intern,DC=nixda,DC=de
     AuthzSVNAuthoritative off
     AuthzSVNAccessFile /etc/apache2/dav_svn.authz
</Location>

Furthermore my dav_svn.authz file is:

[svn:/PROJEKTE/KUNDE1/trunk/R12]
user1 = rw

This is working great in browsers and with SVN 1.7.14 Clients. However with
1.8.X Clients I'm getting Access denied errors on Checkout. Here's my
server logfile with Collabnet 1.7.14 client: (For svn co
https://myserver//svn/PROJEKTE/KUNDE1/trunk/R12/Forms)

192.168.202.108 - - [22/Feb/2014:17:54:29 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 679 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:29 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 865 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:29 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:29 +0100] "PROPFIND
/svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.7.14 neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:30 +0100] "PROPFIND
/svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.7.14 neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:30 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:30 +0100] "PROPFIND
/svn/!svn/vcc/default HTTP/1.1" 207 524 "-" "SVN/1.7.14 neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:30 +0100] "PROPFIND
/svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 647 "-"
"SVN/1.7.14 neon/0.29.6"
192.168.202.108 - - [22/Feb/2014:17:54:31 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 679 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:31 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 865 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:31 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:31 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:31 +0100] "PROPFIND
/svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.7.14 neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:31 +0100] "PROPFIND
/svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.7.14 neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:32 +0100] "REPORT
/svn/!svn/vcc/default HTTP/1.1" 200 686 "-" "SVN/1.7.14 neon/0.29.6"

However with 1.8.8 (e.g. from tortoisesvn, but it doesn't depend on that):

192.168.202.108 - - [22/Feb/2014:17:55:42 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 679 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 865 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 818 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "PROPFIND
/svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "PROPFIND
/svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "PROPFIND
/svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 503 "-"
"SVN/1.8.8 (x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - - [22/Feb/2014:17:55:44 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 679 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 865 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 818 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND
/svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND
/svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND
/svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk/R12 HTTP/1.1" 207 860 "-"
"SVN/1.8.8 (x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND
/svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk HTTP/1.1" 401 678 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND
/svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk HTTP/1.1" 401 678 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND
/svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk HTTP/1.1" 401 678 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"

I think it is a bug of the 1.8 client to ask for the parents of the Folder
to checkout. It doesn't seem to be a issue of serf vs. neon, since this is
what happens when setting http-library=serf with SVN 1.7:

192.168.202.108 - - [22/Feb/2014:18:13:44 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 798 "-" "SVN/1.7.14
serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:44 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 882 "-" "SVN/1.7.14
serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:44 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14
serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:44 +0100] "PROPFIND
/svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.7.14 serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:44 +0100] "PROPFIND
/svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.7.14 serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:44 +0100] "PROPFIND
/svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 503 "-"
"SVN/1.7.14 serf/1.2.1"
192.168.202.108 - - [22/Feb/2014:18:13:45 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 798 "-" "SVN/1.7.14
serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:45 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 882 "-" "SVN/1.7.14
serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:45 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14
serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:45 +0100] "PROPFIND
/svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.7.14 serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:45 +0100] "PROPFIND
/svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.7.14 serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:45 +0100] "REPORT
/svn/!svn/vcc/default HTTP/1.1" 200 635 "-" "SVN/1.7.14 serf/1.2.1"

Any ideas? Can I do something on the serverside? Or will there be a
fix/workaround for this in the client?

Regards,
Johannes
Received on 2014-02-25 03:39:46 CET

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.