Re: [viewvc-users] AuthzSVNAccessFile

It appears that you are attempting to overlap the ViewVC URL space and the
Subversion URL space in a fashion that is *not* designed to work.  In fact,
these two unique tools aren't designed to share a URL space *at all*, so if
it even kinda works, that's a bit of a fluke.

I recommend you upgrade to the latest ViewVC 1.1.x release and make use of
its built-in support for parsing and honoring Subversion authz files (such
as your svn1_directives.conf files).  You should still be able to use LDAP
for your authentication, just as you (apparently) do with your Subversion
access.


On 10/27/2010 12:41 PM, Adrian Marsh wrote:
> Hi,
> 
> Does anyone know if 1.0.7 supports the AuthzSVNAccessFile directive ??
> 
> It does seem to, but I could do with confirmation. I do find then some of the images break, and when I added it to my production envrironment users couldn't access some viewvc areas.  In my test environment though it seems ok, so I'm trying to understand.
> 
> eg,  With that on I get :
> 
> Access denied: 'testuser' GET *docroot*:/images/up.png
> 
> 
> I think I need to allow /images, but I'm confused by what *docroot* means.
> 
> My config at the moment is just:
> 
> <Location "/viewvc">
>         AuthBasicProvider file ldap
>         AuthType Basic
>         AuthzLDAPAuthoritative off
>         AuthName "ViewVC"
> 		AuthUserFile /etc/opt/CollabNet_Subversion/conf/mycompany/svn1-local-auth-file
> 		AuthLDAPURL "ldap://ubiq-serv1.mycompany.local ubiq-serv9.mycompany.local/DC=mycompany,DC=local?sAMAccountName?sub?(objectClass=*)" NONE
> 		AuthLDAPBindDN "CN=svnuser,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=mycompany,DC=local"
>         AuthLDAPBindPassword ******
> 		Require valid-user
> 		SVNParentPath /LogVol03/svn
> 		AuthzSVNAccessFile /etc/opt/CollabNet_Subversion/conf/mycompany/svn1_directives.conf
> </Location>
> 
> 
> So do I just need to add a:
> 
> <Location "/viewvc/*docroot*">
>     Allow all
> </Location>
> 
> Or something similar??
> 
> ------------------------------------------------------
> http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=2676204
> 
> To unsubscribe from this discussion, e-mail: [[email protected]].


-- 
C. Michael Pilato <[email protected]>
CollabNet   <>   www.collab.net   <>   Distributed Development On Demand

------------------------------------------------------
http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=2676213

To unsubscribe from this discussion, e-mail: [[email protected]].

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkzIZGwACgkQokEGqRcG/W7DuACeKSIWDzqYhQzI3y+5Z7+jJBfJ
0QcAnjHNH8dlnH880hyluNquYId/OAR0
=y+YF
-----END PGP SIGNATURE-----