Re: global SSL trust CA

2011-01-28 Thread Jehan PROCACCIA
Le 27/01/2011 20:04, Stefan Sperling a écrit : On Thu, Jan 27, 2011 at 06:52:02PM +0100, Jehan PROCACCIA wrote: hello, since I configure my svn server in https , any time I do a co or ci I get the server certificate presented and pompting me to accept it temporarly or reject it. To prevent

global SSL trust CA

2011-01-27 Thread Jehan PROCACCIA
hello, since I configure my svn server in https , any time I do a co or ci I get the server certificate presented and pompting me to accept it temporarly or reject it. To prevent that I set in ~/.subversion/servers [global] ssl-authority-files = /etc/pki/tls/certs/cachain.pem Now, is there a

Re: 301 with mod_dav / https

2011-01-13 Thread Jehan PROCACCIA
Le 13/01/2011 00:53, fuzzy_4711 a écrit : Unfortunately, this is a long-standing security problem. It means that other non-suexec or user id "Apache" tools, such as Perl or PHP based modules, now have direct write access to your repository, now have arbitrary write access to the repository. In pa

Re: 301 with mod_dav / https

2011-01-12 Thread Jehan PROCACCIA
Le 12/01/2011 15:46, fuzzy_4711 a écrit : Do apache needs to have RW on /var/svn/disi/* ? for now it is user svn only Yup, you got it. Put your apache user into group svn. And give those rights recursive to your repository directory. drwxrwsr-x 7 apache svn . repository/ -fuz I was wo

Re: 301 with mod_dav / https

2011-01-12 Thread Jehan PROCACCIA
Le 12/01/2011 15:46, fuzzy_4711 a écrit : Do apache needs to have RW on /var/svn/disi/* ? for now it is user svn only Yup, you got it. Put your apache user into group svn. And give those rights recursive to your repository directory. drwxrwsr-x 7 apache svn . repository/ -fuz OK, add

Re: 301 with mod_dav / https

2011-01-12 Thread Jehan PROCACCIA
Le 12/01/2011 15:17, Ryan Schmidt a écrit : On Jan 12, 2011, at 08:12, Jehan PROCACCIA wrote: Ryan Schmidt wrote: Remove the lines: Alias /svn "/home/svn" AllowOverride all Apache is confused because you have told it you want it to ser

Re: 301 with mod_dav / https

2011-01-12 Thread Jehan PROCACCIA
Le 12/01/2011 15:05, fuzzy_4711 a écrit : Remove the lines: Alias /svn "/home/svn" AllowOverride all Apache is confused because you have told it you want it to serve /svn as static files located in /home/svn (the Alias directive and the section) and a

Re: 301 with mod_dav / https

2011-01-12 Thread Jehan PROCACCIA
sorry no help, but the same problem, I can browse with firefox my repository , but on the command line I get: svn import . --username disi "http://svn.it-sudparis.eu/disi/disi_pj1/"; -m "initial" svn: Repository moved permanently to 'http://svn.it-sudparis.eu/disi/disi_pj1/'; please relocate

Re: svn Farm

2010-10-11 Thread jehan procaccia
Le 10/10/2010 22:17, Nico Kadel-Garcia a écrit : On Sat, Oct 9, 2010 at 3:05 PM, jehan procaccia wrote: Le 09/10/2010 20:40, Nico Kadel-Garcia a écrit : svn+ssh is the most secure, but it conflcts with your desire for LDAP access. The SSH keys normally live under a single user's account

Re: svn Farm

2010-10-10 Thread jehan procaccia
Le 09/10/2010 20:40, Nico Kadel-Garcia a écrit : svn+ssh is the most secure, but it conflcts with your desire for LDAP access. The SSH keys normally live under a single user's account, the user who owns the repository, who hsould have a locked password. You see why this conflicts with LDAP based

Re: svn Farm

2010-10-10 Thread jehan procaccia
Le 09/10/2010 15:39, Nico Kadel-Garcia a écrit : On Fri, Oct 8, 2010 at 11:15 AM, Bob Archer wrote: The client should be able to store the credentials if you have it set up to do so. On windows/mac it is encrypted with OS included libraries. For Linux you need to set up gnome keyring or

Re: svn Farm

2010-10-08 Thread jehan procaccia
Le 08/10/2010 15:59, Bob Archer a écrit : Now, is collabnet solution able to serve tradition unix shell comand line clients ? is there a svnserve server behind it or is apache able to serve those clients using svn protocol too ? BTW: If you have http(s) access you don't also need svn protocol.

Re: svn Farm

2010-10-08 Thread jehan procaccia
Le 08/10/2010 14:54, Andy Levy a écrit : On Fri, Oct 8, 2010 at 08:09, Nico Kadel-Garcia wrote: Also note: both the 'svn' and 'http' access send the passwords ovder the network in clear text. There are ways around this (such as SSH or SSL tunneling), but they're pesky to set up. Fortunately, "

Re: svn Farm

2010-10-08 Thread jehan procaccia
Le 08/10/2010 02:19, Nico Kadel-Garcia a écrit : On Thu, Oct 7, 2010 at 12:18 PM, jehan procaccia wrote: Le 06/10/2010 17:06, Siva Kumar a écrit : I need to provide svn service to many small groups of students. I'am looking for a tool that would help industrialize managme

Re: svn Farm

2010-10-07 Thread jehan procaccia
Le 06/10/2010 17:06, Siva Kumar a écrit : I need to provide svn service to many small groups of students. I'am looking for a tool that would help industrialize managment of repositories. I don't want to issue hundreds of "svn create", "vi authz" , edit ssh keys for svn+ssh access etc ... Are the

svn Farm

2010-10-06 Thread jehan procaccia
hello, I need to provide svn service to many small groups of students. I'am looking for a tool that would help industrialize managment of repositories. I don't want to issue hundreds of "svn create", "vi authz" , edit ssh keys for svn+ssh access etc ... Are there such tools already existing