subversion -authorization setup problem

David Southwell david at vizion2000.net
Tue Aug 14 05:19:53 PDT 2007


Hi 
I have never before run a subversion server and despite reading "the book" and 
man pages have hit a problem - if anyone feels like helping 
it would be much appreciated.

I have set up subversion to run with apache.
Versions:

apache-2.2.4_2 
subversion-1.4.4_1

I can connect remotely from a client to the server, using name|password 
combination so authentication appears to work fine but authorization is 
failing. 

This is a new repository as can be seen from the output of the 
svnlook. An initial import attempt from the client fails with the client 
reporting" RA Layer request failed"and "403 forbidden" error from the server.

Clearly I have something wrong in my authorization set up. Can anyone point me 
in the right direction?

I have chosen to use an SVNParentPath configuration for multiple repositories 
 under the same "root" with all repositories sharing the same 
AuthzSVNAccessFile. 
I have made all repository paths the same as apache.. owner:group www:www

 
1. Here are my entries in  httpd.conf
##### Modules include
LoadModule dav_module libexec/apache22/mod_dav.so
LoadModule dav_svn_module     libexec/apache22/mod_dav_svn.so
LoadModule authz_svn_module   libexec/apache22/mod_authz_svn.so
##### Location entry: I have only made the one entry -- using the parent do I 
need additional entries for each repository? My reading of the book seemed to 
suggest that was not required.
<Location /svnhome>
        DAV svn
        SVNParentPath /usr2/svnhome
        SVNListParentPath on
# Access control Policy
        AuthzSVNAccessFile /usr/local/etc/apache22/Authz_svnhome

# try anonymous access first, resort to authentication
# if necessary
        
        Require valid-user
        AuthType Basic
        AuthName "Svn Repository"
        AuthUserFile /usr/local/etc/apache22/svn-auth-methusela_02
        
</Location>
CustomLog       /usr/local/etc/apache22/svn_logfile "%t %u %{SVN-ACTION}e" 
env=SVN-ACTION       
#####

2. My AuthzSVNAccessFile
#####
AuthzSVNAccessFile /usr/local/etc/apache22/Authz_svnhome
[/]
* = r
[/usr2/svnhome]
* =r
[project_meth: /usr2/svnhome/project_meth]
david = rw
test = r
#####

3. Output from svnlook
#####
svnlook info /usr2/svnhome/project_meth

2007-08-13 03:09:11 -0700 (Mon, 13 Aug 2007)
0
#####

4. http-error.log
#####
httpd-error.log
[Mon Aug 13 09:30:04 2007] [error] [client 192.168.15.1] Access 
denied: 'david' MKACTIVITY project_meth:
#####

5. svn_logfile
#####
[13/Aug/2007:08:49:56 -0700] david list-dir '/'
[13/Aug/2007:08:51:47 -0700] david list-dir '/'
#####

6.I have made no changes to the files created by the svnadmin create command 
apart from svnserve.conf which reads:
########
anon-access = read
auth-access = write
password-db = /usr/local/etc/apache22/svn-auth-methusela_02
authz-db = /usr/local/etc/apache22/Authz_svnhome.
#######

All help appreciated
Thanks in advance
david


More information about the freebsd-ports mailing list