[users@httpd] SVN and httpd w/ SSL

["Philip M. Gollucci" <pgollucci@xxxxxxxxxx>]

Hi, I'm trying to setup an svn repository that works with httpd2 over 
ssl.  I've gotten pretty far following the Subversion book.
So I can start the server.  I can make requests to it.
I can check out my repo via svn and ssl.

Then I try to do an svn add, svn ci
And I get this -- any great ideas ?

client stderr:
svn: Commit failed (details follow):
svn: Can't create directory '/home/svn/db/transactions/8-1.txn': 
Permission denied
svn: Your commit message was left in a temporary file:
svn:    '/y/svn-commit.5.tmp'

sever error_log:
[Thu Dec 01 22:24:13 2005] [error] [client 68.49.179.55] client denied 
by server configuration: /www/sites/svn.x.y


First some versions:
  FreeBSD 6.0-RELEASE
  Apache/2.0.55 DAV/2 SVN/1.3.0-rc2 mod_ssl/2.0.55 OpenSSL/0.9.7e

  If anyone cares, these are all from the ports tree

svnadmin create /home/svn/repos
chown -R nobody:svnadmin /home/svn/repos

htpasswd -cm /usr/local/etc/apache2/svn-users pgollucci

cat /usr/local/etc/apache2/svn-auth
[/]
* = rw

(I'll restrict this once I get it working)

cat /usr/local/etc/apache2/httpd.conf
ServerRoot "/usr/local"

Listen 443
LockFile /var/log/httpsd-accept.lock
PidFile /var/run/httpsd.pid

LogLevel info
ErrorLog /var/log/httpsd-error.log
User nobody
Group svnadmin

ServerAdmin w@xxx
ServerName x.y
ServerSignature EMail
UseCanonicalName Off

LoadModule ssl_module libexec/apache2/mod_ssl.so
LoadModule mime_module libexec/apache2/mod_mime.so

AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl

SSLRandomSeed startup builtin
SSLRandomSeed connect builtin

SSLMutex  file:/var/log/httpd-ssl_mutex
SSLSessionCache shm:/var/log/httpd-ssl_gcache_data(512000)

LoadModule setenvif_module libexec/apache2/mod_setenvif.so

SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

LoadModule auth_module         libexec/apache2/mod_auth.so
LoadModule access_module       libexec/apache2/mod_access.so
LoadModule dav_module          libexec/apache2/mod_dav.so
LoadModule dav_fs_module       libexec/apache2/mod_dav_fs.so
LoadModule dav_svn_module      libexec/apache2/mod_dav_svn.so
LoadModule authz_svn_module    libexec/apache2/mod_authz_svn.so

<Location />
    Order allow,deny
    Allow from all
</Location>

NameVirtualHost *
<VirtualHost svn.x.y:443>
  ServerName svn.x.y:443

  SSLEngine  On
  SSLCertificateFile     /usr/local/etc/apache2/certs/svn.x.y.crt
  SSLCertificateKeyFile  /usr/local/etc/apache2/keys/svn.x.y.key

  DocumentRoot /www/sites/svn.x.y

  <Location /repos>
        DAV svn
        SVNPath /home/svn

        AuthzSVNAccessFile /usr/local/etc/apache2/svn-auth

        AuthName "Cluster"
        AuthType Basic
        AuthUserFile /usr/local/etc/apache2/svn-users
        Require valid-user

        <LimitExcept GET POST OPTIONS PROPFIND REPORT>
                Order allow,deny
                Deny from all
        </LimitExcept>
  </Location>
</VirtualHost>


--
------------------------------------------------------------------------
"Love is not the one you can picture yourself marrying,
but the one you can't picture the rest of your life without."

"It takes a minute to have a crush on someone, an hour to like someone,
and a day to love someone, but it takes a lifetime to forget someone..."

Philip M. Gollucci (pgollucci@xxxxxxxxxx) 301.254.5198
Consultant / http://p6m7g8.net/Resume/resume.shtml
Senior Software Engineer - TicketMaster - http://ticketmaster.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx