Hi Bert, well the client is asking over and over again and finally gives up: C:\Users\jmichler\Desktop\test>svn co https://SERVER/svn/PROJEKTE/KUNDE1/trunk/R12/ Authentication realm: <https://SERVER:443> PROMATIS Authentifizierung Password for 'user1': ******** Authentication realm: <https://SERVER:443> PROMATIS Authentifizierung Username: user1 Password for 'user1': ******** Authentication realm: <https://SERVER:443> PROMATIS Authentifizierung Username: user1 Password for 'user1': ******** svn: E215004: No more credentials or we tried too many times. Authentication failed
Of cause my credentials are fine, Regards, Johannes 2014-02-25 9:24 GMT+01:00 Bert Huijben <b...@qqmail.nl>: > What error do you see in TortoiseSVN or other 1.8 clients? > > Subversion 1.8 will look at parent directories to find inherited > properties, but it will just ignore properties on directories which it > can't read. > > Bert > > Sent from Windows Mail > > *From:* Johannes Michler <org...@gmail.com> > *Sent:* Saturday, February 22, 2014 6:16 PM > *To:* users@subversion.apache.org > > Hi, > > we're serving a svn repository using Debian 7 and mod_dav_svn.so in apache: > Apache/2.2.22 (Debian) DAV/2 SVN/1.6.17 PHP/5.4.4-14+deb7u7 > > We want to have all members of a certain ldap-group to have full access. > Furthermore, some users from the ldap-directory not in that group shall > have access to certain paths. So our setup is: > > <Location /svn> > DAV svn > SVNPath /data1/svn > AuthName "SVN Authentifizierung" > AuthType Basic > AuthBasicProvider ldap > AuthLDAPUrl > ldap://LDAP-SERVER:389/CN=Users,DC=intern,DC=nixda,DC=de?sAMAccountName > AuthLDAPBindDN "binduser" > AuthLDAPBindPassword password > AuthLDAPGroupAttributeIsDN on > Require ldap-group CN=Mitarbeiter,CN=Users,DC=intern,DC=nixda,DC=de > AuthzSVNAuthoritative off > AuthzSVNAccessFile /etc/apache2/dav_svn.authz > </Location> > > Furthermore my dav_svn.authz file is: > > [svn:/PROJEKTE/KUNDE1/trunk/R12] > user1 = rw > > This is working great in browsers and with SVN 1.7.14 Clients. However > with 1.8.X Clients I'm getting Access denied errors on Checkout. Here's my > server logfile with Collabnet 1.7.14 client: (For svn co > https://myserver//svn/PROJEKTE/KUNDE1/trunk/R12/Forms) > > 192.168.202.108 - - [22/Feb/2014:17:54:29 +0100] "OPTIONS > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 679 "-" "SVN/1.7.14 > neon/0.29.6" > 192.168.202.108 - user1 [22/Feb/2014:17:54:29 +0100] "OPTIONS > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 865 "-" "SVN/1.7.14 > neon/0.29.6" > 192.168.202.108 - user1 [22/Feb/2014:17:54:29 +0100] "PROPFIND > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14 > neon/0.29.6" > 192.168.202.108 - user1 [22/Feb/2014:17:54:29 +0100] "PROPFIND > /svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.7.14 neon/0.29.6" > 192.168.202.108 - user1 [22/Feb/2014:17:54:30 +0100] "PROPFIND > /svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.7.14 neon/0.29.6" > 192.168.202.108 - user1 [22/Feb/2014:17:54:30 +0100] "PROPFIND > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14 > neon/0.29.6" > 192.168.202.108 - user1 [22/Feb/2014:17:54:30 +0100] "PROPFIND > /svn/!svn/vcc/default HTTP/1.1" 207 524 "-" "SVN/1.7.14 neon/0.29.6" > 192.168.202.108 - user1 [22/Feb/2014:17:54:30 +0100] "PROPFIND > /svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 647 "-" > "SVN/1.7.14 neon/0.29.6" > 192.168.202.108 - - [22/Feb/2014:17:54:31 +0100] "OPTIONS > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 679 "-" "SVN/1.7.14 > neon/0.29.6" > 192.168.202.108 - user1 [22/Feb/2014:17:54:31 +0100] "OPTIONS > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 865 "-" "SVN/1.7.14 > neon/0.29.6" > 192.168.202.108 - user1 [22/Feb/2014:17:54:31 +0100] "PROPFIND > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14 > neon/0.29.6" > 192.168.202.108 - user1 [22/Feb/2014:17:54:31 +0100] "PROPFIND > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14 > neon/0.29.6" > 192.168.202.108 - user1 [22/Feb/2014:17:54:31 +0100] "PROPFIND > /svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.7.14 neon/0.29.6" > 192.168.202.108 - user1 [22/Feb/2014:17:54:31 +0100] "PROPFIND > /svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.7.14 neon/0.29.6" > 192.168.202.108 - user1 [22/Feb/2014:17:54:32 +0100] "REPORT > /svn/!svn/vcc/default HTTP/1.1" 200 686 "-" "SVN/1.7.14 neon/0.29.6" > > > However with 1.8.8 (e.g. from tortoisesvn, but it doesn't depend on that): > > 192.168.202.108 - - [22/Feb/2014:17:55:42 +0100] "OPTIONS > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 679 "-" "SVN/1.8.8 > (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "OPTIONS > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 865 "-" "SVN/1.8.8 > (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "OPTIONS > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 818 "-" "SVN/1.8.8 > (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "PROPFIND > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.8.8 > (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "PROPFIND > /svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.8.8 > (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "PROPFIND > /svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.8.8 > (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "PROPFIND > /svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 503 "-" > "SVN/1.8.8 (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - - [22/Feb/2014:17:55:44 +0100] "OPTIONS > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 679 "-" "SVN/1.8.8 > (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "OPTIONS > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 865 "-" "SVN/1.8.8 > (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "OPTIONS > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 818 "-" "SVN/1.8.8 > (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.8.8 > (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND > /svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.8.8 > (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND > /svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.8.8 > (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND > /svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk/R12 HTTP/1.1" 207 860 "-" > "SVN/1.8.8 (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND > /svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk HTTP/1.1" 401 678 "-" "SVN/1.8.8 > (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND > /svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk HTTP/1.1" 401 678 "-" "SVN/1.8.8 > (x64-microsoft-windows) serf/1.3.4" > 192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND > /svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk HTTP/1.1" 401 678 "-" "SVN/1.8.8 > (x64-microsoft-windows) serf/1.3.4" > > > > I think it is a bug of the 1.8 client to ask for the parents of the Folder > to checkout. It doesn't seem to be a issue of serf vs. neon, since this is > what happens when setting http-library=serf with SVN 1.7: > > 192.168.202.108 - - [22/Feb/2014:18:13:44 +0100] "OPTIONS > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 798 "-" "SVN/1.7.14 > serf/1.2.1" > 192.168.202.108 - user1 [22/Feb/2014:18:13:44 +0100] "OPTIONS > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 882 "-" "SVN/1.7.14 > serf/1.2.1" > 192.168.202.108 - user1 [22/Feb/2014:18:13:44 +0100] "PROPFIND > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14 > serf/1.2.1" > 192.168.202.108 - user1 [22/Feb/2014:18:13:44 +0100] "PROPFIND > /svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.7.14 serf/1.2.1" > 192.168.202.108 - user1 [22/Feb/2014:18:13:44 +0100] "PROPFIND > /svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.7.14 serf/1.2.1" > 192.168.202.108 - user1 [22/Feb/2014:18:13:44 +0100] "PROPFIND > /svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 503 "-" > "SVN/1.7.14 serf/1.2.1" > 192.168.202.108 - - [22/Feb/2014:18:13:45 +0100] "OPTIONS > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 798 "-" "SVN/1.7.14 > serf/1.2.1" > 192.168.202.108 - user1 [22/Feb/2014:18:13:45 +0100] "OPTIONS > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 882 "-" "SVN/1.7.14 > serf/1.2.1" > 192.168.202.108 - user1 [22/Feb/2014:18:13:45 +0100] "PROPFIND > /svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14 > serf/1.2.1" > 192.168.202.108 - user1 [22/Feb/2014:18:13:45 +0100] "PROPFIND > /svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.7.14 serf/1.2.1" > 192.168.202.108 - user1 [22/Feb/2014:18:13:45 +0100] "PROPFIND > /svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.7.14 serf/1.2.1" > 192.168.202.108 - user1 [22/Feb/2014:18:13:45 +0100] "REPORT > /svn/!svn/vcc/default HTTP/1.1" 200 635 "-" "SVN/1.7.14 serf/1.2.1" > > > > Any ideas? Can I do something on the serverside? Or will there be a > fix/workaround for this in the client? > > > Regards, > Johannes >