Re: Questions about setting up Subversion Server

2022-11-28 Thread Felix Natter

hello Daniel,

many thanks for your answers.

Best Regards,

Felix

On 23.11.22 22:21, Daniel Shahaf wrote:

Felix Natter wrote on Tue, Nov 15, 2022 at 09:03:49 +0100:

- In my svnserve wrapper I call this:

exec /usr/bin/svnserve "$@" -r /repos

-> Does the (Linux-) system automatically call this with "-t"?


The -t is added by the client when it invokes the tunnel command
(ssh(1)).  This is documented in the [tunnels] section of the default
~/.subversion/config file and in Chapter 6 of the book (just search for
"-t").


- If I use ssh auth (svn+ssh://), do I have to change the options in
/svnserve.conf,
  like anon-access=none? (I just want access based on file system
permissions, and no
  anon access)


If you don't run svnserve without -t, then the value of anon-access
shouldn't matter.

I'd probably still set it to «none» just in case.


- I am migrating from a 3rd party server which used a different directory
structure,
   and system users (no LDAP), but also svn+ssh://.
   Can I keep all the history, even if some old users in the 3rd party server
are not
   available in the new LDAP auth? (but of course the user names of existing
users are kept)
   In other words: does a SVN Server store the user information (history) as
strings or
   something else that is linked to accounts?


As strings, in the svn:author revprop.


- I am using strict permissions for two (LDAP-)groups in the base
directories for the repos
  (/repos/students, /repos/employees). The Howto I used [1] is using "umask
002" in the
  wrapper. I think for my case (groups) "007" is sufficient, right?

[1]https://www.startupcto.com/server-tech/subversion/setting-up-svn

Please CC: me, as I am not subscribed.

Many Thanks and Best Regards!

Felix

--

*SIDACT GmbH
Simulation Data Analysis and
Compression Technologies
*
*Felix Natter*
/Software Developer /

Auguststraße 29
53229 Bonn
Germany

Phone    :   +49 228 5348 0430
Direct   :   +49 228 4097 7118
Email    :felix.nat...@sidact.com
Web  :http://www.sidact.com/





--

*SIDACT GmbH
Simulation Data Analysis and
Compression Technologies
*
*Felix Natter*
/Software Developer /

Auguststraße 29
53229 Bonn
Germany

Phone    :   +49 228 5348 0430
Direct   :   +49 228 4097 7118
Email    : felix.nat...@sidact.com
Web  : http://www.sidact.com/



OpenPGP_signature
Description: OpenPGP digital signature


Re: Questions about setting up Subversion Server

2022-11-23 Thread Daniel Shahaf
Felix Natter wrote on Tue, Nov 15, 2022 at 09:03:49 +0100:
> - In my svnserve wrapper I call this:
> 
> exec /usr/bin/svnserve "$@" -r /repos
> 
> -> Does the (Linux-) system automatically call this with "-t"?
> 

The -t is added by the client when it invokes the tunnel command
(ssh(1)).  This is documented in the [tunnels] section of the default
~/.subversion/config file and in Chapter 6 of the book (just search for
"-t").

> - If I use ssh auth (svn+ssh://), do I have to change the options in
> /svnserve.conf,
>  like anon-access=none? (I just want access based on file system
> permissions, and no
>  anon access)
> 

If you don't run svnserve without -t, then the value of anon-access
shouldn't matter.

I'd probably still set it to «none» just in case.

> - I am migrating from a 3rd party server which used a different directory
> structure,
>   and system users (no LDAP), but also svn+ssh://.
>   Can I keep all the history, even if some old users in the 3rd party server
> are not
>   available in the new LDAP auth? (but of course the user names of existing
> users are kept)
>   In other words: does a SVN Server store the user information (history) as
> strings or
>   something else that is linked to accounts?
> 

As strings, in the svn:author revprop.

> - I am using strict permissions for two (LDAP-)groups in the base
> directories for the repos
>  (/repos/students, /repos/employees). The Howto I used [1] is using "umask
> 002" in the
>  wrapper. I think for my case (groups) "007" is sufficient, right?
> 
> [1] https://www.startupcto.com/server-tech/subversion/setting-up-svn
> 
> Please CC: me, as I am not subscribed.
> 
> Many Thanks and Best Regards!
> 
> Felix
> 
> -- 
> 
> *SIDACT GmbH
> Simulation Data Analysis and
> Compression Technologies
> *
> *Felix Natter*
> /Software Developer /
> 
> Auguststraße 29
> 53229 Bonn
> Germany
> 
> Phone  :   +49 228 5348 0430
> Direct :   +49 228 4097 7118
> Email  : felix.nat...@sidact.com
> Web    : http://www.sidact.com/
> 





Questions about setting up Subversion Server

2022-11-15 Thread Felix Natter

hello SVN Users,

I have set up a basic SVN Server with svn+ssh:// auth (System users with 
LDAP)

by wrapping svnserve [1]

I have a few questions for which I could not find answers in the manual:

- In my svnserve wrapper I call this:

exec /usr/bin/svnserve "$@" -r /repos

-> Does the (Linux-) system automatically call this with "-t"?

- If I use ssh auth (svn+ssh://), do I have to change the options in 
/svnserve.conf,
 like anon-access=none? (I just want access based on file system 
permissions, and no

 anon access)

- I am migrating from a 3rd party server which used a different 
directory structure,

  and system users (no LDAP), but also svn+ssh://.
  Can I keep all the history, even if some old users in the 3rd party 
server are not
  available in the new LDAP auth? (but of course the user names of 
existing users are kept)
  In other words: does a SVN Server store the user information 
(history) as strings or

  something else that is linked to accounts?

- I am using strict permissions for two (LDAP-)groups in the base 
directories for the repos
 (/repos/students, /repos/employees). The Howto I used [1] is using 
"umask 002" in the

 wrapper. I think for my case (groups) "007" is sufficient, right?

[1] https://www.startupcto.com/server-tech/subversion/setting-up-svn

Please CC: me, as I am not subscribed.

Many Thanks and Best Regards!

Felix

--

*SIDACT GmbH
Simulation Data Analysis and
Compression Technologies
*
*Felix Natter*
/Software Developer /

Auguststraße 29
53229 Bonn
Germany

Phone    :   +49 228 5348 0430
Direct   :   +49 228 4097 7118
Email    : felix.nat...@sidact.com
Web  : http://www.sidact.com/



OpenPGP_signature
Description: OpenPGP digital signature