Hello.. I can't handle how to have a real anonymous user on anonymous-enabled subversion repositories. It seems that apache want still try to validate with a system user before showing the svn repository.
Now I managed to create and anonymous.mydomain user with no password and no svn authorisation. People can then use --username=anonymous (with no password) to log-in on anonymous-enabled repositories (while private one requires that a user has been explicitelly authorized for that specific repository).
My question is how to allows apache to give read access to anonymous repositories without first requiring to use the anonymous user??
Post edited by: sylvaticus, at: 2008/07/31 05:55<br><br>Post edited by: sylvaticus, at: 2008/08/01 06:27
Maybe I wasn't clear.
How do I configure Virtualmin to let users go to:
http://mydomain.org/svn/myproject
and browse the code ?? (without first having to put anonymous?)
Even more important, how can I allow them to checkout the code simply as:
svn checkout http://mydomain.org/svn/myproject/trunk
(without to firstly specify the "anonymous" user)
Howdy,
It sounds like you're saying when you created the Subversion repository in Services -> SVN Repositories, you selected "Allow anonymous read access" alongside the other details for the repository?.
If that's correct, what does the resulting svn-access.conf file look like? It should have a "* = r" in it.
If you look in ~/etc/svn-access.conf (or ~/domains/DOMAIN_NAME/etc/svn-access.conf if it's not your first domain), that file contains the permissions for your repository.
Go ahead and post that here if you don't immediately see what's causing the problem you're having.
-Eric
hi andreycheck.. thanks for your help.
My ~/etc/svn-access.conf file looks correct:
[code:1]
[DOMAIN_NAME:/]
* = r
antonello = rw
martin = rw
[/code:1]
In fact using a system username that is not in the list I can check-out in anonymous mode.
Problem is that, even for reading, it firsts try to validate again a local system user..
This is an example of a working session trying to make an anonymous checkout:
[code:1]
lobianco@lobiancoserver:~/temp/svntest$ svn checkout http://regmas.org/svn/regmas/trunk
Reame di autenticazione: <http://regmas.org:80> regmas.org
Password per 'lobianco':
Reame di autenticazione: <http://regmas.org:80> regmas.org
Username:
Password per '':
Reame di autenticazione: <http://regmas.org:80> regmas.org
Username:
Password per '':
svn: OPTIONS di 'http://regmas.org/svn/regmas/trunk': autorizzazione fallita (http://regmas.org)
lobianco@lobiancoserver:~/temp/svntest$
[/code:1]
This is instead using the anonymous (or whatsoever) user (working):
[code:1]
lobianco@lobiancoserver:~/temp/svntest$ svn checkout http://regmas.org/svn/regmas/trunk --username=anonymous
Reame di autenticazione: <http://regmas.org:80> regmas.org
Password per 'anonymous':
A trunk/Doxyfile
....
[/code:1]
[/code]
I got a look at the apache configuration.
This is the relevant bits of /etc/apache2/sites-available/regmas.org.conf :
[code:1]<Location /svn>
DAV svn
SVNParentPath /home/regmas/svn
AuthType Basic
AuthName regmas.org
AuthUserFile /home/regmas/etc/svn.basic.passwd
Require valid-user
AuthzSVNAccessFile /home/regmas/etc/svn-access.conf
Satisfy All
</Location>[/code:1]
While if I comment "Satisfy All" nothing happen, if I comment "Require valid-user"instead then finally I got fully anonymous access to the repoository.
Hovewer when I try to access using a rw username, this still one access the repository as anonymous, so I can't commit back if I remove "Require valid-user"..
I finally solved following
http://help.joyent.com/index.php?pg=kb.page&id=52
Basically, the <b>Satisfy All</b> directive in apache virtual host configuration file should be <b>Satisfy any</b>.
However I think Virtualmin should by default add "Satisfy any" instead of "Satisfy All" when it enables SVN for a domain..
Should I feel a bug report?? What do you think ??
Howdy,
Glad you got it working!
I would definitely file a bug report for the problem you had and how you solved it.
If they added the "Satisfy All" intentionally we'll learn why, otherwise perhaps they'll be able to change that in the next release.
Thanks!
-Eric
done ;-)
thanks to you...
/Sylvaticus
Looks like there is a lingering issue with this.
All my repo's wont allow anonymous access at all even though the svn-access.conf is correct.
[hotsanic:/]* = r
sgrayban = rw
[whmcs-clientmaps:/]
* = r
scott = rw
sgrayban = rw
No matter what I try it simply will not work.
Define "will not work". What error exactly are you getting when trying what?