Description
Issue is under Subversion 1.5.2 + Apache 2.2.9 setup to provide http/https access to the repository users at offshore location. Apache is also configured with "mod_auth_sspi" to provide AD based authentication and authorization(project based) is done by listing the users properly in the "AuthZSVNAccessFile". The issue is that whenever a user tries to copy a folder to different location(tagging/branching etc) in their project repository. During those operations, "svn copy" is trying to access the root of the repository. If the user is provided with access to the root level, the operation will work fine. Interestingly, I have not faced this issue with Subversion 1.4.4 and an upgrade of my repository to Subversion 1.5.2 introduced this issue. So why is it that the copy does a PROPFIND on the root of the repo? Any suggestions on a solution? PS: The "Location " directive in Apache is as follows, <Location /repository> DAV svn SVNPath <Path to repository> AuthName "<Message>" AuthType SSPI SSPIAuth On SSPIAuthoritative On SSPIOfferBasic On require valid-user AuthzSVNAccessFile "<path to the directory>\svnaccess.conf" </Location> Root of the repository : "repository" Project location : "projects/proj_a" proj_a administrator : "projaadmin" (this user have RW privileges to the project location ("repository/projects/proj_a") but does not have any privileges on the repository root ("repository") Deatils: Command executed: svn copy --username <domain>\projadmin http://ourserver/repository/projects/pro j_a/trunk http://ourserver/repository/projects/proj_a/tags/baseline1 Error shown: svn: PROPFIND request failed on 'repository:/' svn: PROPFIND of 'repository:/': authorization failed Error log from Apache: [Fri Jan 16 13:24:31 2009] [error] [client 127.0.0.1] Access denied: '<domain>\\projaadmin' PROPFIND repository:/ After further testing, its been observed with the same server setup(Subversion 1.5.2 & Apache 2.2.9) if I am using Subversion client 1.4.4, this issue is not there and "svn copy/svn move" is working perfectly fine, at the specified paths. But Subversion client 1.5.2 & 1.5.5 are showing the problem and is behaving unexpectedly.
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1027921
Original issue reported by dipukm
Attachments
Issue Links
- duplicates
-
SVN-3242 Subversion demands unnecessary access to parent directories of operations
- Closed