Re: [SVN-MIGRATION] SVN authentication issues

On Dec 15, 2008, at 3:48 PM, Rasmus Lerdorf wrote:
>>> And I suggest we put a little password script there for people to  
>>> verify
>>> their passwords.  When they do we can store the md5 hash.
>> I like that thought. Can you do it? I don't know enough about master
>> works; it'd take me awhile to put it together. Not to mention I don't
>> have access.
> Can you send me an example password file showing whatever the format  
> is
> Subversion wants?

It's an Apache htdigest file. A set of lines:

username:realm:md5

An Apache MD5 hash is generated by:

$passwordHash = md5($username . ':' . $realm . ':' .  
$cleartextPassword);

"realm" for us is always "PHP Subversion Repository", w/o quotes of  
course. The entry for svnread, password svnread, is:

svnread:PHP Subversion Repository:cb3d4eb7c0848cbbc8d68acabb0e4c3b

It should be updated the same way as the CVS passwd file, by selecting  
from the database. The complete file should be put on y1 at the path "/ 
home/svn/SVNROOT/users.db". That file is currently checked into CVS to  
maintain the svnread entry, but will not be in the future, so feel  
free to overwrite it. Make sure the file remains readable by the svn  
user. Also make sure to generate the svnread entry for the read-only  
user.

-- Gwynne, Daughter of the Code
"This whole world is an asylum for the incurable."