On 10.08.2017 19:39, greg_at_gregj.me wrote:
> Sorry for the late reply..
>
> Our httpd.conf file contains for this location (some information retracted..
> and some lines are commeted out)
>
> ## Main Subversion repository
> <Location /ec-svn>
> DAV svn
> SVNPath "/usr/local/svn/ec-svn/repo"
> ErrorDocument 404 default
> AuthzSVNAccessFile "/usr/local/svn/ec-svn/auth/authaccess"
> SVNIndexXSLT /xslt/default-svnindex.xsl
> SVNPathAuthz off
> #AuthzSVNAuthoritive off
> #AuthUserFile /usr/local/svn/ec-svn/conf/htpasswd
> AuthLDAPURL ldap://********
> AuthLDAPBindDN "*****"
> AuthLDAPBindPassword "*****"
> AuthType Basic
> AuthBasicProvider ldap
> #AuthzLDAPAuthoritative on
> AuthName " svn repository edisvn"
> <LimitExcept MERGE>
> Require valid-user
> </LimitExcept>
> </Location>
So you're telling httpd that MERGE requests do not need authentication.
Why then are you surprised when it doesn't provide the credentials to
mod_dav_svn?
-- Brane
Received on 2017-08-10 20:17:56 CEST