Hi,
we're serving a svn repository using Debian 7 and mod_dav_svn.so in apache:
Apache/2.2.22 (Debian) DAV/2 SVN/1.6.17 PHP/5.4.4-14+deb7u7
We want to have all members of a certain ldap-group to have full access.
Furthermore, some users from the ldap-directory not in that group shall
have access to certain paths. So our setup is:
<Location /svn>
DAV svn
SVNPath /data1/svn
AuthName "SVN Authentifizierung"
AuthType Basic
AuthBasicProvider ldap
AuthLDAPUrl
ldap://LDAP-SERVER:389/CN=Users,DC=intern,DC=nixda,DC=de?sAMAccountName
AuthLDAPBindDN "binduser"
AuthLDAPBindPassword password
AuthLDAPGroupAttributeIsDN on
Require ldap-group CN=Mitarbeiter,CN=Users,DC=intern,DC=nixda,DC=de
AuthzSVNAuthoritative off
AuthzSVNAccessFile /etc/apache2/dav_svn.authz
</Location>
Furthermore my dav_svn.authz file is:
[svn:/PROJEKTE/KUNDE1/trunk/R12]
user1 = rw
This is working great in browsers and with SVN 1.7.14 Clients. However with
1.8.X Clients I'm getting Access denied errors on Checkout. Here's my
server logfile with Collabnet 1.7.14 client: (For svn co
https://myserver//svn/PROJEKTE/KUNDE1/trunk/R12/Forms)
192.168.202.108 - - [22/Feb/2014:17:54:29 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 679 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:29 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 865 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:29 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:29 +0100] "PROPFIND
/svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.7.14 neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:30 +0100] "PROPFIND
/svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.7.14 neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:30 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:30 +0100] "PROPFIND
/svn/!svn/vcc/default HTTP/1.1" 207 524 "-" "SVN/1.7.14 neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:30 +0100] "PROPFIND
/svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 647 "-"
"SVN/1.7.14 neon/0.29.6"
192.168.202.108 - - [22/Feb/2014:17:54:31 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 679 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:31 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 865 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:31 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:31 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14
neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:31 +0100] "PROPFIND
/svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.7.14 neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:31 +0100] "PROPFIND
/svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.7.14 neon/0.29.6"
192.168.202.108 - user1 [22/Feb/2014:17:54:32 +0100] "REPORT
/svn/!svn/vcc/default HTTP/1.1" 200 686 "-" "SVN/1.7.14 neon/0.29.6"
However with 1.8.8 (e.g. from tortoisesvn, but it doesn't depend on that):
192.168.202.108 - - [22/Feb/2014:17:55:42 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 679 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 865 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 818 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "PROPFIND
/svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "PROPFIND
/svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:43 +0100] "PROPFIND
/svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 503 "-"
"SVN/1.8.8 (x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - - [22/Feb/2014:17:55:44 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 679 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 865 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 818 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND
/svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND
/svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND
/svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk/R12 HTTP/1.1" 207 860 "-"
"SVN/1.8.8 (x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND
/svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk HTTP/1.1" 401 678 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND
/svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk HTTP/1.1" 401 678 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
192.168.202.108 - user1 [22/Feb/2014:17:55:44 +0100] "PROPFIND
/svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk HTTP/1.1" 401 678 "-" "SVN/1.8.8
(x64-microsoft-windows) serf/1.3.4"
I think it is a bug of the 1.8 client to ask for the parents of the Folder
to checkout. It doesn't seem to be a issue of serf vs. neon, since this is
what happens when setting http-library=serf with SVN 1.7:
192.168.202.108 - - [22/Feb/2014:18:13:44 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 798 "-" "SVN/1.7.14
serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:44 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 882 "-" "SVN/1.7.14
serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:44 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14
serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:44 +0100] "PROPFIND
/svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.7.14 serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:44 +0100] "PROPFIND
/svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.7.14 serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:44 +0100] "PROPFIND
/svn/!svn/bc/29062/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 503 "-"
"SVN/1.7.14 serf/1.2.1"
192.168.202.108 - - [22/Feb/2014:18:13:45 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 401 798 "-" "SVN/1.7.14
serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:45 +0100] "OPTIONS
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 200 882 "-" "SVN/1.7.14
serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:45 +0100] "PROPFIND
/svn/PROJEKTE/KUNDE1/trunk/R12/Forms HTTP/1.1" 207 639 "-" "SVN/1.7.14
serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:45 +0100] "PROPFIND
/svn/!svn/vcc/default HTTP/1.1" 207 504 "-" "SVN/1.7.14 serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:45 +0100] "PROPFIND
/svn/!svn/bln/29062 HTTP/1.1" 207 518 "-" "SVN/1.7.14 serf/1.2.1"
192.168.202.108 - user1 [22/Feb/2014:18:13:45 +0100] "REPORT
/svn/!svn/vcc/default HTTP/1.1" 200 635 "-" "SVN/1.7.14 serf/1.2.1"
Any ideas? Can I do something on the serverside? Or will there be a
fix/workaround for this in the client?
Regards,
Johannes
