[viewvc-users] svnauth not working

When using svnauth authorizer globally, subdirectories don't inherit permissions
as svn does, so I switched to use per-root options. With this settings there is a problem
accessing http://xxx.yyy.zzz.ar/viewvc/repo1, viewvc error (not Apache) is:
-------
An Exception Has Occurred

The root "repo1" is unknown. If you believe the value is correct, then please double-check your configuration.
HTTP Response Status

404 Not Found
-------

Using URL http://xxx.yyy.zzz.ar/viewvc/repo1/ everything works as expected,
except that links generated as:
http://xxx.yyy.zzz.ar/viewvc/repo1?view=revision&revision=3
yield the same error message.

In any case authentication works as expected, and without using authorization
everything is ok too.
Essentially, what I am trying to do is to use one authenticator globally
and a different authorizer for each repo accesible from ViewVC and also different
from the SVN authorizer, because apparently svnauthfile needs (if used globally):
[/]
* = r
which is not acceptable in our svn server.

Relevant lines in viewvc.conf:

---------------
root_parents = /var/svn/repos : svn
root_as_url_component = 1
template_dir = /etc/viewvc/templates
docroot = /viewvc-dr/docroot

[root-repo1/options]
authorizer = svnauthz

[root-repo1/authz-svnauthz]
authzfile = /etc/apache2/vc-repo1.authz
#rc
[root-repo2/options]
authorizer = svnauthz

[root-repo2/authz-svnauthz]
authzfile = /etc/apache2/vc-repo2.authz
---------------------

vc-repo1.authz contents:
-------------
[/]
user1 = rw
-------------

Relevant ViewVC Apache conf.:


-------------------------
#rc    ScriptAlias /viewvc/repo1 /usr/lib/cgi-bin/viewvc.cgi/repo1
#rc    ScriptAlias /viewvc/repo2 /usr/lib/cgi-bin/viewvc.cgi/repo2
#rc or alternatively
     ScriptAlias /viewvc /usr/lib/cgi-bin/viewvc.cgi

	Alias /viewvc-dr/docroot /etc/viewvc/templates/docroot


<Directory /etc/viewvc/templates/docroot>
    Order allow,deny
    Allow from all
</Directory>


<Location /viewvc/repo1/>
     AuthType Basic
     AuthName "VC-Repo1 Access Control"
     AuthUserFile /etc/apache2/dav_svn.passwd
     AuthBasicProvider ldap file
     AuthBasicAuthoritative  on
     AuthzLDAPAuthoritative off
     AuthLDAPURL "ldaps://ldap.yyy.zzz.ar/dc=yyy,dc=zzz,dc=ar?uid?sub"
     Require valid-user
</Location>

<Location /viewvc/repo2/>
        AuthType Basic
        AuthName "VC-Repo2 Access Control"
        AuthUserFile /etc/apache2/dav_svn.passwd
        AuthBasicProvider ldap file
        AuthBasicAuthoritative  on
        AuthzLDAPAuthoritative off
        AuthLDAPURL "ldaps://ldap.yyy.zzz.ar/dc=yyy,dc=zzz,dc=ar?uid?sub"
        Require valid-user
</Location>
----------------------

Relevant Svn Apache conf:

-------------------
<Location /svn>
DAV svn
SVNParentPath /var/svn/repos
#rc SSLRequireSSL
AuthType Basic
AuthName "Subversion Repository"
AuthUserFile /etc/apache2/dav_svn.passwd
AuthBasicProvider ldap file
AuthBasicAuthoritative  on
AuthzLDAPAuthoritative off
AuthLDAPURL "ldaps://zzz.yyy.zzz.ar/dc=yyy,dc=zzz,dc=ar?uid?sub"
Require valid-user
AuthzSVNAccessFile /etc/apache2/dav_svn.authz
</Location>
-------------------

Apache version: Apache/2.2.14 (Ubuntu) DAV/2 SVN/1.6.6 PHP/5.3.2-1ubuntu4.7 with Suhosin-Patch mod_ssl/2.2.14 OpenSSL/0.9.8k
Subversion version: 1.6.6 (r40053)
ViewVC version: 1.1.5 (Ubuntu 10.10) and 1.1.9

Did I miss something?

Rodolfo Cossalter

------------------------------------------------------
http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=2706333

To unsubscribe from this discussion, e-mail: [[email protected]].