Mailing-List: contact users-help@subversion.apache.org; run by ezmlm
Precedence: bulk
Date: Mon, 16 Jan 2017 18:48:44 +0000
From: Daniel Shahaf <d.s@daniel.shahaf.name>
To: "Henk P. Penning" <penning@uu.nl>
Cc: users@subversion.apache.org
Subject: Re: problem authz_svn_module
Message-ID: <20170116184844.GA4584@fujitsu.shahaf.local2>
References: <alpine.LRH.2.02.1701150942490.3319@csstaff.science.uu.nl>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <alpine.LRH.2.02.1701150942490.3319@csstaff.science.uu.nl>
User-Agent: Mutt/1.5.23 (2014-03-12)
archived-at: Mon, 16 Jan 2017 18:52:19 -0000

Henk P. Penning wrote on Sun, Jan 15, 2017 at 10:02:12 +0100:
> Hi,
> 

Hello!

>    but (and this is the PROBLEM) the checkout command prompts
>    for a username/password :
> 
>     %  svn co //svn.science.uu.nl/repos/project.mirmon/trunk
> 
>    With the "LimitExcept" lines in the config, the checkout
>    command works, although some errors appear in the log
>    (see below).
> 
>   So, it appears that the 'checkout' command does a
> 
>     PROPFIND /repos/project.mirmon/!svn/rvr/64/trunk
> 
>    which causes the username/password-prompt when the
>    "LimitExcept" lines are omitted.
> 
>    -- Does this diagnosis make sense ?
>    -- How do I make this work, without the LimitExcept trick ?

LimitExcept is actually the documented recommendation; see
http://svnbook.red-bean.com/nightly/en/svn.serverconfig.httpd.html#svn.serverconfig.httpd.authz
(second code snippet)

The other option is to set two separate <Location> blocks, one for
anonymous users (that excludes everything-but-trunk unconditionally) and
one for authenticated users (that requires authentication for all
operations).

>    Note :
>    -- The server is apache-2.4, but 2.2 appears to have probs too.
>       I wonder how authz_svn_module is supposed to work under 2.4
>       proper (without the 'old' "satisfy any". Shouldn't authz_svn_module
>       set an environment variable in the case "r = *" (anonymous read) ?

I'm not sure; ask dev@?

Cheers,

Daniel