Re: Subversion access control

2011-07-17 Thread Andy Levy
On Sun, Jul 17, 2011 at 02:06, Andy Canfield wrote: > We are running svnserve on a Mac OS X. > > I can not get the subversion server to control access. I executed the server > by this command: >     /usr/bin/svnserve --daemon --root=/var/svn > --config-file=/var/svn/config/svnserve.conf > As long

Re: Subversion access control

2011-07-17 Thread Matthew Beals
I don't know your needs, but have you considered using svn+ssh instead? This transfers authentication over to ssh, which simplifies things quite a bit. Since all it is doing it making a tunnel and then calling svnserve as the user logging in, you can still retain user based permissions. Matt

Re: Subversion access control

2011-07-19 Thread Andy Canfield
OFF THE SUBJECT OF APACHE, NOW TRYING TO ACCESS SVNSERVE VIA PORT 3690 /var/svn/config/svnserve.conf has been changed from the default to show *anon-access = none password-db = passwd authz-db = authz* The passwd file contains *andy = canfield* The authz file contains: *[/sample] andy = rw* Th

Re: Subversion access control

2011-07-19 Thread Andy Levy
On Tue, Jul 19, 2011 at 06:50, Andy Canfield wrote: > OFF THE SUBJECT OF APACHE, NOW TRYING TO ACCESS SVNSERVE VIA PORT 3690 > > /var/svn/config/svnserve.conf has been changed from the default to show > anon-access = none > password-db = passwd > authz-db = authz > > The passwd file contains > and

Re: Subversion access control

2011-07-19 Thread Thorsten Schöning
Guten Tag Andy Canfield, am Dienstag, 19. Juli 2011 um 12:50 schrieben Sie: > [1] Why does it ask for the password for "andy", then ask for a user > name and password? The svn client first tried the last used user or your current username on underlying OS. > [2] What is an authentication realm?

RE: Subversion access control

2011-07-19 Thread Bob Archer
> Guten Tag Andy Canfield, > am Dienstag, 19. Juli 2011 um 12:50 schrieben Sie: > > > [1] Why does it ask for the password for "andy", then ask for a > user > > name and password? > > The svn client first tried the last used user or your current > username > on underlying OS. > > > [2] What is a

Re: Subversion access control

2011-07-19 Thread Andy Canfield
One thing has hit my mind today that I don't think you realize ... *I have never, in my entire life, seen a working Subversion system. * Apparently Subversion, as distributed, doesn't work - the access authentications are deliberately turned off. It would be really neat if somebody had a s

Re: Subversion access control

2011-07-19 Thread Nico Kadel-Garcia
On Tue, Jul 19, 2011 at 11:14 PM, Andy Canfield wrote: > One thing has hit my mind today that I don't think you realize ... > >     I have never, in my entire life, seen a working Subversion system. > > Apparently Subversion, as distributed, doesn't work - the access > authentications are delibera

Re: Subversion access control

2011-07-20 Thread Geoff Hoffman
Andy, I thought you were off Apache and onto svnserve. Anyway, I sent you this info last week - maybe you missed it. It is pasted again below. I will grant to you that it is tricky to set up. The david winter blog post below spells it out perfectly... for a single repo setup, multiple users. For

Re: Subversion access control

2011-07-20 Thread Andy Canfield
Thank you very much. On 07/20/2011 12:19 PM, Nico Kadel-Garcia wrote: On Tue, Jul 19, 2011 at 11:14 PM, Andy Canfield wrote: One thing has hit my mind today that I don't think you realize ... I have never, in my entire life, seen a working Subversion system. Apparently Subversion, as d

Re: Subversion access control

2011-07-20 Thread Dave Huang
On 7/20/2011 11:14 PM, Andy Canfield wrote: Isn't http://localhost/svn supposed to show me something useful? I don't use SVNParentPath and haven't tried this, but perhaps add "SVNListParentPath on" right after "*SVNParentPath /data/svn"? See the "Listing repositories" section of http://svnbo

Re: Subversion access control

2011-07-21 Thread Geoff Hoffman
On Wed, Jul 20, 2011 at 9:14 PM, Andy Canfield wrote: > ** > Thank you very much. > > > On 07/20/2011 12:19 PM, Nico Kadel-Garcia wrote: > > On Tue, Jul 19, 2011 at 11:14 PM, Andy Canfield > wrote: > > One thing has hit my mind today that I don't think you realize ... > > I have never, in m

Re: Subversion access control

2011-07-21 Thread Geoff Hoffman
> > > > On Wed, Jul 20, 2011 at 9:14 PM, Andy Canfield > wrote: > >> ** >> Thank you very much. >> >> >> On 07/20/2011 12:19 PM, Nico Kadel-Garcia wrote: >> >> On Tue, Jul 19, 2011 at 11:14 PM, Andy Canfield >> wrote: >> >> One thing has hit my mind today that I don't think you realize ... >> >

Re: Subversion access control

2011-07-21 Thread Ryan Schmidt
On Jul 20, 2011, at 23:14, Andy Canfield wrote: > I would like to use http/https. I am not supposed to be working on the > server, but on my notebook workstation. And svn or svn+ssh require port 3690 > to be forwarded by the router, and we don't own the router. So I would prefer > http and/or

Re: Subversion access control

2011-07-21 Thread Andy Canfield
Thank you very much On 07/20/2011 10:27 PM, Geoff Hoffman wrote: Andy, I thought you were off Apache and onto svnserve. Anyway, I sent you this info last week - maybe you missed it. It is pasted again below. I will grant to you that it is tricky to set up. The david winter blog post below s

Re: Subversion access control

2011-07-22 Thread Geoff Hoffman
On Thu, Jul 21, 2011 at 11:19 PM, Andy Canfield wrote: > I notice that you don't have any entries that read "... = r"; everyone who > can read can write also. No need? > Yeah, I just don't have a use case for that. The RSS feed of a repo commits from websvn is much more useful than read-only acc

Re: Subversion access control

2011-07-23 Thread Andy Canfield
On 07/22/2011 02:39 AM, Ryan Schmidt wrote: On Jul 20, 2011, at 23:14, Andy Canfield wrote: I would like to use http/https. I am not supposed to be working on the server, but on my notebook workstation. And svn or svn+ssh require port 3690 to be forwarded by the router, and we don't own the

Re: Subversion: Access control management

2011-07-17 Thread Andy Levy
On Sun, Jul 17, 2011 at 02:07, Andy Canfield wrote: > The file /var/svn/sample/README.txt says >     This is a Subversion repository; use the 'svnadmin' tool to examine >     it.  Do not add, delete, or modify files here unless you know how >     to avoid corrupting the repository. > but as far as

Re: Subversion access control / Linux users etc.

2011-07-21 Thread Andy Canfield
More user/command interaction - The commands to create the Subversion Repository Parent directory were *sudo bash mkdir /data/svn chmod a+w /data/svn* This created this directory: *drwxrwxrwx 4 root 4096 2011-07-21 17:36 /data/svn/* I ran this command as user root: *svnadmin

Re: Subversion access control / Linux users etc.

2011-07-21 Thread Geoff Hoffman
On Thu, Jul 21, 2011 at 4:54 AM, Andy Canfield wrote: > ** > More user/command interaction - > > The commands to create the Subversion Repository Parent directory were > *sudo bash > mkdir /data/svn > chmod a+w /data/svn* > This created this directory: > *drwxrwxrwx 4 root 4096 201

Re: Subversion access control / Linux users etc.

2011-07-21 Thread Thomas Harold
The issues with passwords is why we ended up going with SSH public-key authentication. Load the SSH key into the SSH agent, unlock it with the passphrase, then don't worry about it again until we reset the SSH agent at logout. Less prompts, happier users. (Plus it makes it harder to get into

Re: Subversion access control / Linux users etc.

2011-07-21 Thread Ryan Schmidt
On Jul 21, 2011, at 06:54, Andy Canfield wrote: > The browser, when pointing to http://localhost/svn/RepoName, gives this answer > RepoName - Revision 0: / > Powered by Subversion version 1.6.12 (r955767). > This is true whether RepoName is 'sample' or 'example'. Of course, the only > thi

Re: Subversion access control / Linux users etc.

2011-07-23 Thread Andy Canfield
Thank you very much. On 07/22/2011 02:36 AM, Ryan Schmidt wrote: On Jul 21, 2011, at 06:54, Andy Canfield wrote: The browser, when pointing to http://localhost/svn/RepoName, gives this answer RepoName - Revision 0: / Powered by Subversion version 1.6.12 (r955767). This is true whethe