On Thu, Jan 17, 2013 at 11:42 PM, Trent Fisher <trent.fis...@oracle.com> wrote:
> I am working to upgrade my servers to SVN 1.7.8 and just ran into a weird
> issue.  If I look at the repository via the web, it shows up as empty.  At
> first I thought it was something with the repos-web stylesheet I'm using,
> but looking at the page source I see this:
>
> <svn version="1.7.8 (r1419691)"
>      href="http://subversion.apache.org/";>
>   <index rev="119763" path="/" base="foobar">
>   </index>
> </svn>
>
> But if I use that exact same URL on the command line, it works as I expect:
>
> $ svn ls https://adc4110316.us.oracle.com/svn/foobar/
> README
> branches/
> tags/
> trunk/
>
> Furthermore my WebSVN pages show the repository correctly, so this isn't a
> show-stopper.  If I access a subdirectory it works correctly via all three
> methods.
>
> FYI, here's my apache config (slightly redacted) for that repository (this
> is the exact same config I'm using for my 1.6 servers):
>
> <Location /svn/foobar>
>    DAV svn
>    SVNPath /scm/svn/repos/foobar
>    SVNIndexXSLT "/repos-web/view/repos.xsl"
>    SVNPathAuthz on
>    AuthzSVNAccessFile /scm/svn/repos/foobar/conf/authz
>    AuthType Basic
>    AuthLDAPURL  ldap://[...]
>    AuthzLDAPAuthoritative On
>    Require valid-user
>    Satisfy Any
> </Location>
>
> The authz file contains only "[/]" and "$authenticated = r", so I certainly
> should be able to read it.
>
> After a bit more testing, I think I figured it out.  When I access the top
> of the repository, it does not request authentication via the web (and,
> thus, gives me an empty page since anonymous access is not permitted), but
> it does request authentication via the svn client and websvn.  But if I
> access a subdirectory, it requests authentication in all three cases and
> works as expected.  However, my SVN 1.6 server will request authentication
> in all cases.  So this seems to be a change in 1.7, is it a bug or something
> that changed in 1.7 and requires config file changes?

I don't know the details, but I have seen some discussions on the
dev-list which seem to be related to this. I think the relevant part
starts here:

  http://svn.haxx.se/dev/archive-2012-10/0268.shtml

(or some other posts which you can find by searching the archives on
"Authz on Collection of Repositories").

I think this has recently been fixed on trunk. See this line in the
CHANGES file on trunk:
  * SVNParentPath / repository listing now authz-filtered (r1408184)

So if that's your issue, it will probably be fixed in 1.8.
-- 
Johan

Reply via email to