Re: [viewvc-users] multiple repos with multiple authz files

On 05/31/2013 04:59 PM, Will Yardley wrote:
> Our current setup has a bunch of repos under a single path, let's say
> /srv/subversion/. 
> 
> Then, in the config, we have:
> 
>   <Location /foo>
>       DAV svn
>       SVNPath /srv/subversion/foo
>   
>       AuthzSVNAccessFile /srv/subversion/etc/foo.access
>   
>       Satisfy Any
>       AuthBasicProvider ldap
>       AuthzLDAPAuthoritative Off 
>       AuthLDAPURL ....
>       AuthType Basic
>       Require valid-user
>   </Location>
> 
> Two questions about this:
> 
> 1) Given that we're using Apache basic auth, do we have to handle
> authentication via Apache config and authorization view the authz files?

ViewVC has no support for authentication at all, so yes, Apache will have to
be the gatekeeper authn-wise.  And yes, it's best to do authorization via
the authz files.

> 2)  I don't mind having:
> svn_roots = foo: /srv/subversion/foo,
>             bar: /srv/subversion/bar
> 
> rather than just:
> svn_roots = subversion: /srv/subversion
> 
> But I don't now then how to handle the mapping of authz files when each
> repo has its own authz file.
> 
> Is the only way to make this work to have a single authz file for all
> repos?

Have you tried using root-specific option overrides in viewvc.conf?  You'd
still use:

   root_parents = /srv/subversion: svn

And you'd still have

   authorizer = svnauthz

But then elsewhere in the viewvc.conf file, you'd add sections for each
repository like so:

   [root-foo/authz-svnauthz]
   authzfile = /srv/subversion/etc/foo.access

   [root-bar/authz-svnauthz]
   authzfile = /srv/subversion/etc/bar.access

   ...

See the commented-out section of viewvc.conf.dist that begins with "ViewVC
recognizes per-root configuration overrides, too."

-- 
C. Michael Pilato <[email protected]>
CollabNet   <>   www.collab.net   <>   Enterprise Cloud Development

------------------------------------------------------
http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=3057011

To unsubscribe from this discussion, e-mail: [[email protected]].

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=tj9N
-----END PGP SIGNATURE-----