RE: disable security hole in svn+ssh?

2011-07-29 Thread Cooke, Mark
> -Original Message- > From: Andy Canfield [mailto:andy.canfi...@pimco.mobi] > Sent: 29 July 2011 02:27 > To: Geoff Hoffman > Cc: Nico Kadel-Garcia; users@subversion.apache.org > Subject: Re: disable security hole in svn+ssh? > Apparently, regardless of the protocol, the Subversion

Post Commit Hook Script !!

2011-07-29 Thread Himanshu Raina
Hi, The post-commit script isn't getting executed whenever code is merged from trunk to tags. Whenever the code needs to be deployed the code is copied from trunk to tags. The script runs fine when executed on the server but doesn't get invoked whenever a commit is done. svn co http://mydomain.c

RE: Post Commit Hook Script !!

2011-07-29 Thread Cooke, Mark
Hello, > -Original Message- > From: Himanshu Raina [mailto:raina_himan...@yahoo.com] > Sent: 29 July 2011 08:17 > To: users@subversion.apache.org > Subject: Post Commit Hook Script !! > > Hi, > > The post-commit script isn't getting executed whenever code > is merged from trunk to tags

RE: Post Commit Hook Script !!

2011-07-29 Thread Himanshu Raina
The scenario is like this. I have checked out copy on my local machine. Now whenever I merge the code the script which ideally should get executed doesn't execute at all. I modified the script as given below. Only changes I have done is removed IF loops and it works fine. The permissions are the

Re: Post Commit Hook Script !!

2011-07-29 Thread Ryan Schmidt
On Jul 29, 2011, at 02:17, Himanshu Raina wrote: > I'm using capistrano for deploying code on my server. The post commit hook is > given below > > #!/bin/sh > # > REPOS="$1" > > DIR=`/usr/bin/svnlook cha

Re: Post Commit Hook Script !!

2011-07-29 Thread Ryan Schmidt
On Jul 29, 2011, at 02:43, Himanshu Raina wrote: > The scenario is like this. I have checked out copy on my local machine. Now > whenever I merge the code the script which ideally should get executed > doesn't execute at all. I modified the script as given below. Only changes I > have done is r

Re: Post Commit Hook Script !!

2011-07-29 Thread Himanshu Raina
Well the interactive part has been removed. Moreover, there exists null keys between the servers so it won't prompt for password. The current issue that I'm facing is that it gives the following error on execution Warning: post-commit hook failed (exit code 255) with output:+ /usr/bin/ssh -l roo

Re: Post Commit Hook Script !!

2011-07-29 Thread Ryan Schmidt
On Jul 29, 2011, at 03:38, Himanshu Raina wrote: > Well the interactive part has been removed. Moreover, there exists null keys > between the servers so it won't prompt for password. The current issue that > I'm facing is that it gives the following error on execution > > Warning: post-commit

Re: Post Commit Hook Script !!

2011-07-29 Thread Himanshu Raina
Okay what I meant by null keys was password less keys. Apache runs as svn user and the repository permissions are as follows drwxr-xr-x 7 svn apache 4096 Jul 27 12:14 Project/ The hooks script also has 755 permission and ownership as mentioned above. The hook script when run from the svn server w

Re: AW: Web site: checkout or export?

2011-07-29 Thread Thomas Harold
On 7/27/2011 8:57 AM, Markus Schaber wrote: Hi, Andy, Von: Andy Canfield [mailto:andy.canfi...@pimco.mobi] - Using 'svn checkout', the working web site will have the subversion control files in the .svn subdirectory, which might be a security hole. You could use some pattern based access con

SVN externals - using a GUID style instead of a path?

2011-07-29 Thread Thomas Harold
http://subversion.apache.org/docs/release-notes/1.5.html#externals The relative URLs being allowed in svn:externals was a huge step forward. But it still relies on the source path not ever changing. For example: /repos/zag foo/bar1 Which is fine as long as "zag" never changes its name. Wha

Re: SVN externals - using a GUID style instead of a path?

2011-07-29 Thread Geoff Rowell
On Jul 29, 2011, at 8:17 AM, Thomas Harold wrote: > http://subversion.apache.org/docs/release-notes/1.5.html#externals > > The relative URLs being allowed in svn:externals was a huge step forward. > But it still relies on the source path not ever changing. > > For example: > > /repos/zag foo

Re: disable security hole in svn+ssh?

2011-07-29 Thread Les Mikesell
On 7/28/11 8:27 PM, Andy Canfield wrote: Seems like every protocol uses a different method to do authorization, and that's my ignorance. I'm trying to work out an authorization mechanism that applies regardless of the protocol. Why? Pick one that works and leave the others so users can't use

Post-Commit hook script

2011-07-29 Thread Himanshu Raina
Hi, The post-commit script isn't getting executed whenever code is merged from trunk to tags. Whenever the code needs to be deployed the code is copied from trunk to tags. The script runs fine when executed on the server but doesn't get invoked whenever a commit is done. svn co http://mydomain.c

upgrading source code in local repository

2011-07-29 Thread Brecht Ameije
Hi, I'm using svn about one year now, but this issue is something that keeps bothering me. I'm working on a project with embedded devices running busybox. As I'm making some changes to the busybox source code (tweaking some hard coded parameters rather than changing actual code), I'm keeping the

Re: upgrading source code in local repository

2011-07-29 Thread Andy Levy
On Fri, Jul 29, 2011 at 04:19, Brecht Ameije wrote: > Hi, > > I'm using svn about one year now, but this issue is something that > keeps bothering me. > > I'm working on a project with embedded devices running busybox. > As I'm making some changes to the busybox source code (tweaking some > hard c

1.7 neon fetched by get-deps.sh, but not usable by configure?

2011-07-29 Thread tsteven four
get-deps.sh fetches neon 0.29.6, but configure reports: configure: checking neon library > checking for neon-config... no > > An appropriate version of neon could not be found, so libsvn_ra_neon > will not be built. If you want to build libsvn_ra_neon, please > install neon 0.29.6 on this system.

Re: 1.7 neon fetched by get-deps.sh, but not usable by configure?

2011-07-29 Thread Mark Phippard
On Fri, Jul 29, 2011 at 10:25 AM, tsteven four wrote: > get-deps.sh fetches neon 0.29.6, but configure reports: > > configure: checking neon library >> checking for neon-config... no >> >> An appropriate version of neon could not be found, so libsvn_ra_neon >> will not be built. If you want to b

Re: 1.7 neon fetched by get-deps.sh, but not usable by configure?

2011-07-29 Thread Mark Phippard
Please reply to users@ list. On Fri, Jul 29, 2011 at 10:39 AM, tsteven four wrote: > No, I did not build neon, but with 1.6 configure would build the makefile > and neon would be listed in SVN_EXTERNAL_PROJECT_SUBDIRS. then when > subversion was made, the dependencies listed in SVN_EXTERNAL_PR

1.7 check-swig-py failure

2011-07-29 Thread tsteven four
I get the following error when trying to make check-swig-py: /usr/bin/python > /apps/install/subversion-1.7.0-beta2-Linux_x86_64/subversion/bindings/swig/python/tests/run_all.py > Traceback (most recent call last): > File > "/apps/install/subversion-1.7.0-beta2-Linux_x86_64/subversion/

Re: 1.7 check-swig-py failure

2011-07-29 Thread Stefan Sperling
On Fri, Jul 29, 2011 at 09:12:57AM -0600, tsteven four wrote: > ldd and readelf shown above. Is there some method to get python use the > RPATH in libsvn_ra_serf as ldd does so the correct libapr is found, or is > the python check overriding RPATH with > some method like LD_LIBRARY_PATH? Yes, you

Re: 1.7 check-swig-py failure

2011-07-29 Thread tsteven four
Thanks, I will look at your workarounds. On my system the troubles seem to be because /usr/lib64 gets put into RPATH in all the .so libs in subversion/bindings/swig/python/* (including the subdirectories). It is put in RPATH before the path element for the apr, apr-util that I have built. If I u

Re: 1.7 check-swig-py failure

2011-07-29 Thread Stefan Sperling
On Fri, Jul 29, 2011 at 10:48:47AM -0600, tsteven four wrote: > Thanks, I will look at your workarounds. > > On my system the troubles seem to be because /usr/lib64 gets put into RPATH > in all the .so libs in subversion/bindings/swig/python/* (including the > subdirectories). It is put in RPATH

RE: upgrading source code in local repository

2011-07-29 Thread Brecht Ameije
On Fri, Jul 29, 2011 at 15:53, Andy Levy wrote: >On Fri, Jul 29, 2011 at 04:19, Brecht Ameije wrote: >> Hi, >> >> I'm using svn about one year now, but this issue is something that >> keeps bothering me. >> >> I'm working on a project with embedded devices running busybox. >> As I'm making some

Re: 1.7 check-swig-py failure

2011-07-29 Thread tsteven four
> > Is libpython.*.so in /usr/lib64, by chance? > yes In my build I get this (quote from swig/python/_wc.la:) Not sure what the is about, but in my _wc.la file the only reference to /usr/lib64 is in dependency_libs, which includes /usr/lib64/libexpat.la. My apr-util is built with the internal e

Re: 1.7 check-swig-py failure

2011-07-29 Thread Daniel Shahaf
Stefan Sperling wrote on Fri, Jul 29, 2011 at 18:32:40 +0200: > On Fri, Jul 29, 2011 at 09:12:57AM -0600, tsteven four wrote: > > ldd and readelf shown above. Is there some method to get python use the > > RPATH in libsvn_ra_serf as ldd does so the correct libapr is found, or is > > the python che

Re: AW: Web site: checkout or export?

2011-07-29 Thread Nico Kadel-Garcia
On Fri, Jul 29, 2011 at 7:54 AM, Thomas Harold wrote: > On 7/27/2011 8:57 AM, Markus Schaber wrote: >> >> Hi, Andy, >> >> Von: Andy Canfield [mailto:andy.canfi...@pimco.mobi] >> >>> - Using 'svn checkout', the working web site will have the >>> subversion control files in the .svn subdirectory, wh

Re: Web site: checkout or export?

2011-07-29 Thread David Weintraub
On Wed, Jul 27, 2011 at 7:57 AM, Ryan Schmidt wrote: > The .svn directories needn't be a security hole; you can configure your web > server to > not serve their contents, or even not acknowledge their existence. In my > httpd.conf I have: > > RedirectMatch 404 .*/\.svn(/|$) In SVN 1.7 clients

Re: Post Commit Hook Script !!

2011-07-29 Thread David Weintraub
On Fri, Jul 29, 2011 at 3:17 AM, Himanshu Raina wrote: > > Hi, > The post-commit script isn't getting executed whenever code is merged from > trunk to tags. > Whenever the code needs to be deployed the code is copied from trunk to tags. > The script runs > fine when executed on the server but do

Re: Web site: checkout or export?

2011-07-29 Thread Konstantin Kolinko
2011/7/30 David Weintraub : > On Wed, Jul 27, 2011 at 7:57 AM, Ryan Schmidt > wrote: > >> The .svn directories needn't be a security hole; you can configure your web >> server to >>  not serve their contents, or even not acknowledge their existence. In my >> httpd.conf I have: >> >> RedirectMatc

Re: Web site: checkout or export?

2011-07-29 Thread Nico Kadel-Garcia
On Fri, Jul 29, 2011 at 6:32 PM, Konstantin Kolinko wrote: > 2011/7/30 David Weintraub : >> On Wed, Jul 27, 2011 at 7:57 AM, Ryan Schmidt >> wrote: >> >>> The .svn directories needn't be a security hole; you can configure your web >>> server to >>>  not serve their contents, or even not acknowle

Re: Post Commit Hook Script !!

2011-07-29 Thread Ryan Schmidt
On Jul 29, 2011, at 04:08, Himanshu Raina wrote: > Okay what I meant by null keys was password less keys. Apache runs as svn > user and the repository permissions are as follows > > drwxr-xr-x 7 svn apache 4096 Jul 27 12:14 Project/ > > The hooks script also has 755 permission and ownership as