Return-Path: 
 <users-return-94304-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: (qmail 3396 invoked from network); 25 Mar 2010 16:02:42 -0000
Received: from unknown (HELO mail.apache.org) (140.211.11.3)
  by 140.211.11.9 with SMTP; 25 Mar 2010 16:02:42 -0000
Received: (qmail 87635 invoked by uid 500); 25 Mar 2010 16:02:39 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 87575 invoked by uid 500); 25 Mar 2010 16:02:38 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 87567 invoked by uid 99); 25 Mar 2010 16:02:38 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 25 Mar 2010 16:02:38 +0000
X-ASF-Spam-Status: No, hits=-1.0 required=10.0
	tests=AWL,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS,T_TO_NO_BRKTS_FREEMAIL
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: domain of
 rog79939ab33xy531web.de@bounce.antispameurope.com designates 83.246.65.53 as
 permitted sender)
Received: from [83.246.65.53] (HELO relay03-haj2.antispameurope.com)
 (83.246.65.53)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 25 Mar 2010 16:02:30 +0000
Received: by relay03-haj2.antispameurope.com (ASE-Secure-MTA,
 from userid 1000)
	id DAB2163C18F; Thu, 25 Mar 2010 17:02:06 +0100 (CET)
Received: from iis.fhg.de (iis.iis.fhg.de [153.96.172.2])
	by relay03-haj2.antispameurope.com (ASE-Secure-MTA) with SMTP id 1A04763C16E
	for <users@httpd.apache.org>; Thu, 25 Mar 2010 17:02:06 +0100 (CET)
From: rog7993@web.de
Received: from smtp02.iis.fraunhofer.de (mailserv02.iis.fraunhofer.de
 [153.96.171.52])
	by iis.fhg.de (8.8.5/) with ESMTP id RAA23004
	for <users@httpd.apache.org>; Thu, 25 Mar 2010 17:02:06 +0100 (MET)
Received: from [10.54.67.129] (ix001.iis.fhg.de [10.54.67.129])
	by smtp02.iis.fraunhofer.de (Postfix) with ESMTP id F1339200A083
	for <users@httpd.apache.org>; Thu, 25 Mar 2010 17:02:05 +0100 (CET)
Message-ID: <4BAB88FD.4000102@web.de>
Date: Thu, 25 Mar 2010 17:02:05 +0100
User-Agent: Mozilla/5.0 (X11; U; Linux i686; de;
 rv:1.9.1.5) Gecko/20091204 Lightning/1.0b1 Thunderbird/3.0
MIME-Version: 1.0
To: users@httpd.apache.org
References: <4BA8ABF7.1080207@web.de>
	 <1404e5911003230534p1af5847av3d17325cc02b06bb@mail.gmail.com>
	 <4BA8E585.7020603@web.de>
	 <1404e5911003230903x9d534eet10fc1d8c749fab7a@mail.gmail.com>
	 <4BA8ED50.9020903@web.de>
 <1404e5911003230938t747151bdw52cb8047e3aa0e3@mail.gmail.com>
In-Reply-To: <1404e5911003230938t747151bdw52cb8047e3aa0e3@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: Re: [users@httpd] overlapping <Location>-Sections

On Tue, Mar 23, 2010 at 12:38:43PM -0400, Eric Covener wrote:
> On Tue, Mar 23, 2010 at 12:33 PM,  <rog7993@web.de> wrote:
> >>> <Location "/websvn">
> >>>   WebSVN stuff
> >>> </Location>
> >>>
> >>> <LocationMatch "/(?!websvn)">
> >>>   subversion stuff
> >>> </LocationMatch>

Possibly this configuration does not work because of a bug in Apache,
mod_dav or mod_dav_svn in the handling of "complex" regular expressions
within <LocationMatch> directives. I found this five years old bug
description:

  https://issues.apache.org/bugzilla/show_bug.cgi?id=35077

I don't know whether this was fixed in newer Apache versions in the
meantime. But this bug is still open.

> Going back to OP, what part of the outter location did you think was
> bleeding in? Did you just need to reset to satisfy all?

No. Mainly I want to deactivate "DAV". I didn't posted it until now.
But this configuration doesn't work, too:

<Location />
    # Subversion stuff
    DAV svn
    ...
</Location>

<Location /websvn>
    # WebSVN stuff
    DAV off
    ...
</Location>

I found an other solution. Requests to WebSVN (/websvn) will be handled
directly by the SSL-VirtualHost, all other requests (subversion
repositories) will be proxied to another VirtualHost. See above. But I'm
not happy with this solution, because it reduces the subversion
performance significantly.

<VirtualHost *:80>
    ServerName svnserv01....
    ServerAlias localhost

    RequestHeader edit Destination ^https http early

    LogLevel Warn

    <Location />
        DAV svn
        SVNParentPath /home/subversion/repos

        AuthzSVNAccessFile svn-access-file

        SSLRequireSSL

        AuthType Basic
        AuthBasicProvider ldap
        AuthName "Subversion repository (LDAP password)"
        AuthLDAPUrl ...

        # try anonymous access first, resort to real
        # authentication if necessary.
        Satisfy Any
        Require valid-user
    </Location>
</VirtualHost>

<VirtualHost *:443>
    ServerName svnserv01...
    DocumentRoot /var/www/svnserv01/htdocs

    Alias /websvn-2.3.0/ /opt/websvn-2.3.0/

    RewriteEngine On

    RewriteCond   %{REQUEST_URI}  !^/websvn.*
    RewriteRule   (.*)   http://localhost$1 [P]

    LogLevel warn

    SSLEngine On
    SSLCertificateFile ...
    SSLCertificateKeyFile ...
    SSLCACertificateFile ...

    <Directory /var/www/svnserv01/htdocs>
         Options Multiviews SymLinksIfOwnerMatch

         Order allow,deny
         Allow from all
    </Directory>

    <Directory /opt/websvn-2.3.0/templates>
         Order allow,deny
         Allow from all
    </Directory>

    <Location "/websvn">
        Order allow,deny
        Allow from all

        SSLRequireSSL

        AuthType Basic
        AuthBasicProvider ldap
        AuthName "Subversion repository (LDAP password)"
        AuthLDAPUrl ...
        AuthzLDAPAuthoritative off

        # try anonymous access first, resort to real
        # authentication if necessary.
        #Satisfy Any
        Require valid-user
    </Location>

    <Location />
        Order allow,deny
        Allow from all
    </Location>

</VirtualHost>

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org