Subversion integrate LDAP
Hi, Everything i tried and in tried, but it won’t work. ErrorDocument 404 default DAV svn SVNParentPath /data/svn SVNListParentPath off AuthType Basic AuthBasicProvider ldap # file AuthName "SVN" AuthzSVNAccessFile /etc/httpd/conf/dav_svn.acl #ldap AuthLDAPURL "ldap://ldap-server:389/DC=dep,DC=com?sAMAccountName? sub?(&(objectClass=*)(memberOf=CN=SVN,OU=User Groups,OU=Accounts,DC=dep,DC=com))" NONE AuthLDAPBindDN "binddn of the service account" AuthLDAPBindPassword "password of the service account to search" #Require ldap-group CN=SVN,OU=ASDS,OU=User Groups,OU=Accounts,DC=dep,DC=com Require valid-user ssl-access_log: - - [28/Nov/2016:12:40:59 +0100] "GET /svn/se/ HTTP/1.1" 401 381 - [28/Nov/2016:12:41:12 +0100] "GET /svn/se/ HTTP/1.1" 403 209 [28/Nov/2016:12:41:12 +0100] "GET /favicon.ico HTTP/1.1" 404 209 ssl_error_log: Mon Nov 28 12:41:12.226892 2016] [authz_svn:error] [pid 29816] [client] Access denied: 'user' GET se:/ ssl_request_log: [28/Nov/2016:12:40:59 +0100] TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /svn/se/ HTTP/1.1" 381 [28/Nov/2016:12:41:12 +0100] TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /svn/se/ HTTP/1.1" 209 [28/Nov/2016:12:41:12 +0100] TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 209 It seems that is an authorization error. When i remove *AuthzSVNAccessFile /etc/httpd/conf/dav_svn.acl* then i have access to the repo, and that's not okay. Is there anyone who can help me? The system : RedHat 7, SVN:1.7, Apache:2.4 regards
Re: Subversion integrate LDAP
On 28.11.2016 12:58, Wlllem Dalen wrote: > It seems that is an authorization error. When i remove > *AuthzSVNAccessFile /etc/httpd/conf/dav_svn.acl* If that's the case, then this has nothing to do with LDAP — that's used of authentication, not authorization. The most likely reason is that the contents if your dav_svn.acl file are wrong, either there's a syntax error or the access rules do actually deny access to the repository. -- Brane
Re: Subversion integrate LDAP
Hello Wlllem, On Mon, Nov 28, 2016 at 2:58 PM, Wlllem Dalen wrote: > > ssl-access_log: > > - - [28/Nov/2016:12:40:59 +0100] "GET /svn/se/ HTTP/1.1" 401 381 > - [28/Nov/2016:12:41:12 +0100] "GET /svn/se/ HTTP/1.1" 403 209 > [28/Nov/2016:12:41:12 +0100] "GET /favicon.ico HTTP/1.1" 404 209 > > > ssl_error_log: > > Mon Nov 28 12:41:12.226892 2016] [authz_svn:error] [pid 29816] [client] > Access denied: 'user' GET se:/ Why do you name these logs "ssl_*"? As these are SVN server logs, I guess that its a typo and you intended to name them as "svn_*". > It seems that is an authorization error. When i remove > AuthzSVNAccessFile /etc/httpd/conf/dav_svn.acl > > then i have access to the repo, and that's not okay. As you see, the logged event is "Access denied: 'user' GET se:/". This event means that the user account authenticates successfully. But this account lacks permissions to "se" repository. To fix this, you should look through the authz file "/etc/httpd/conf/dav_svn.acl" and double-check the access rules it contains. Read SVNBook | Path-Based Authorization[1] section for the instructions on how to setup the access rules. [1]: http://svnbook.red-bean.com/en/1.8/svn.serverconfig.pathbasedauthz.html -- With best regards, Pavel Lyalyakin VisualSVN Team
Re: Error running this command: svn --non-interactive --config-dir /tmp
Hi Guys,
I'm facing exactly the same problem... Have you found any workaround to
overcome this issue ?
Regards,
On Tuesday, August 12, 2014 at 11:26:53 AM UTC+3, Jimmy Halim wrote:
>
> Hi guys,
>
> I am new to websvn. I have installed rancid, svn, and websvn today. I have
> also created repository for testing. All looks good until I encountered the
> following error while browsing:
> http://server_ip/websvn/
>
> Error running this command: svn --non-interactive --config-dir /tmp list
> --xml 'file:///var/rancid/svn/@'
>
> Any idea why this is happening? I have modified the
> /usr/share/websvn/include/config.php to include the repository directory:
> $config->addRepository('EXAMPLE', 'file:///var/rancid/svn/');
>
> When I run the command manually, it looks that I am getting a good result:
>
> svn --non-interactive --config-dir /tmp list --xml
> 'file:///var/rancid/svn/@'
>
>
> path="file:///var/rancid/svn">
> kind="dir">
> EXAMPLE
> revision="6">
> rancid
> 2014-08-08T14:29:14.284275Z
>
>
>
>
>
> I am sorry if this has been discussed before. I have tried to search in
> the topics, but return nothing. Many thanks.
>
> Cheers,
> Jimmy
>
Re: Error running this command: svn --non-interactive --config-dir /tmp
Hello Hussein, On Mon, Nov 28, 2016 at 5:36 PM, Hussein Ballout wrote: > Hi Guys, > > I'm facing exactly the same problem... Have you found any workaround to > overcome this issue ? > What do you mean by "exactly the same problem"? Normally, you should be getting an error message and it should have a second informative part like e.g "Unable to connect to a repository at URL". I understand that you've just bumped up an old thread assuming that the issue you have is 100% the same as the one discussed here. But could you please add more details? What Subversion server and client versions do you use? Do you actually use WebSVN? How do you reproduce the errors? How is your server and client configured? What's logged to the logs? Answers to these questions are essential because there is a great chance that your issue and the one originally discussed here are completely unrelated. BTW, it's a good practice to start a new thread instead of bumping up a 2 years old thread. Just not to mix up possibly unrelated issues and disorient readers. -- With best regards, Pavel Lyalyakin VisualSVN Team
Documentation SVN
Hi. Do you have any documentation about an independent tool called "SVNControl"? It serves to manage subversion from an environment with a windows computer from a server with SVN. José.
Re: Documentation SVN
Hi José, On 11/28/2016 22:13, s...@crccoding.com wrote: > Hi. > > Do you have any documentation about an independent tool called > "SVNControl"? It serves to manage subversion from an environment with > a windows computer from a server with SVN. > > José. Can you elaborate a bit what you expect/mean? Certainly you are not asking for a link to the SVNControl project and/or its documentation, since that would be faster to enter in google than asking on an unassociated mailing list. Regards, Stefan smime.p7s Description: S/MIME Cryptographic Signature
