On 10.08.2017 19:39, g...@gregj.me wrote:
> Sorry for the late reply..
>
> Our httpd.conf file contains for this location (some information retracted..
> and some lines are commeted out)
>
> ## Main Subversion repository
> <Location /ec-svn>
>         DAV svn
>         SVNPath "/usr/local/svn/ec-svn/repo"
>         ErrorDocument 404 default
>         AuthzSVNAccessFile "/usr/local/svn/ec-svn/auth/authaccess"
>         SVNIndexXSLT /xslt/default-svnindex.xsl
>         SVNPathAuthz off
>         #AuthzSVNAuthoritive  off
>         #AuthUserFile /usr/local/svn/ec-svn/conf/htpasswd
>         AuthLDAPURL ldap://********
>         AuthLDAPBindDN "*****"
>         AuthLDAPBindPassword "*****"
>         AuthType Basic
>         AuthBasicProvider ldap
>         #AuthzLDAPAuthoritative on
>         AuthName " svn repository edisvn"
>   <LimitExcept MERGE>
>     Require valid-user
>   </LimitExcept>
> </Location>


So you're telling httpd that MERGE requests do not need authentication.
Why then are you surprised when it doesn't provide the credentials to
mod_dav_svn?

-- Brane

Reply via email to