Talk:Subversion/WebDAV
From Gentoo Linux Wiki
|
Pending tasks for Talk:Subversion/WebDAV | edit -history - watch - purge | |
|---|---|---|
Contents |
[edit] More Details
Where do i extract the xsl files to? where can i view the results? the guide somewhat tells how to set things up, but has nothing on viewing the results.
- A little trial and error shows that these files should be extracted to the directory defined by SVNParentPath (/var/svn in this document).
- The second answer can be found in the following obscure reference...
- instructs apache to handle all requests whose URL path part begins with /svn via DAV provider (Dav svn line)
- In other words, any virtual host will send svn requests to the svn handler. For example...
- https://localhost/svn
- https://myvhost.mydomain.com/svn
[edit] Isn't this a good way to redirect all http access to /svn/repos to https
RewriteEngine On
RewriteCond %{REQUEST_URI} ^/svn/repos
RewriteCond %{SERVER_PORT} ^80$
RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [R]
It works here, but I don't know if it is a good suggestion.
[edit] Groups problem
The first part is totally non-intuitive, and I also doubt if it actually works.
You are making the repository owned by apache:apache, then adding the apache user to the svnusers group. Doesn't make any sense to me.
Shouldn't the repository have root:svnusers ownership, with apache being a member of the svnusers group?
I'm not sure if this has the desired effect, because I'm just trying to figure out this stuff right now.
[edit] Another groups problem
Shouldn't the usermod command posted have the -a option?
Otherwise you will remove the user(s) from their existing supplementary groups!
Personally I am happy with the apache:apache ownership, and I think that this is right thing to do.
[edit] Magically Modify Files
for anyone who isn't a apache guru, its hard to understand what you mean in the SSL parts. you could have just replaced the whole section with "google elsewhere" and conveyed as much information. there are examples for other files, but not this xx_ssl... file. i left wondering if i should append the dav_svn file to the end of it or not. Where would I place these directives?
[edit] Restrict to SSL
The article states: "In order to restrict access to only SSL it's not enough to add SSLRequireSSL to 47_mod_dav_svn.conf. Each configuration directive from 47_mod_dav_svn.conf must be moved inside the virtual host directive for XX_mod_ssl_default-vhost.conf."
Is this actually true...this seems to defeat the purpose of a declaration "SSLRequireSSL". I have SSLRequireSSL defined in 47_mod_dav_svn.conf, as well as every other directive. I did not put any of the above mentioned directives in 48_mod_ssl_ssl_default-vhost.conf....and no one is able to access my svn repos unless they use ssl. So SSLRequireSSL seems to be sufficient, and one does not need to place the directives within <IfDefine SSL><IfModule mod_ssl.c></IfDefine></IfDefine>
[edit] Meaningful usernames with Active Directory/LDAP
Let's say I have successfully authenticated against AD or LDAP, but the usernames I have in there are numbers like 123456. Is there a way I can translate or build in a lookup to show a username instead of a number in the SVN logs?
[edit] SVN+SSH
It might be helpful to note that that the group ownership and group permissions as above also enables the svn+ssh:// protocol to work.
[edit] mpm-prefork
The article states that the USE flag mpm-prefork is needed. Is it? If so, why? I'm setting up Apache with default USE options set, and neither mpm-prefork nor mpm-worker is set. But I don't think it's an issue. To me it's strange this quirk is the first thing the article discusses. I would expect a more generic section at the start, with this potential issue somewhere at the bottom. -- User:Ernstdehaan
[edit] mixing in Initial configuration
I think:
If you want to support only one repository you set path for the repository using
SVNPath /var/svn/repos
However it is more convenient to have multiple repositories supported
SVNParentPath /var/svn
should be:
If you want to support only one repository you set path for the repository using
SVNPath /var/svn
However it is more convenient to have multiple repositories supported
SVNParentPath /var/svn/repos
--Tekknokrat 17:23, 13 May 2007 (UTC)
