[lug] setting subversion permissions with apache/mod_dav

[Hugh Brown]

> Has anyone here ever set up an svn repository under apache mod_dav, to 
> require a password? How did you get the svn client to prompt for user 
> name and password? I even deleted all the temp files from 
> ~/.subversion/auth/svn.ssl.server, and all working copies, so there is 
> no chance of it having memorized a name and pass (and in fact the user 
> name I'm using on the remote machine is different than the name on the 
> server). If I can block access to anyone not having a proper login 
> name/pass, it'll be ready for use (at the moment IP tables blocks all IP 
> addresses except for mine).
> 


To be sure it isn't cached credentials, I'd use a new user account to do 
the checkout and edit ~/.subversion/config to have

[auth]
store-auth-creds = no

and then try to connect as different users.

Another portion of the mod_dav_svn set up was the permissions file for 
the repository.

this seems relevant
http://svnbook.red-bean.com/nightly/en/svn.serverconfig.httpd.html#svn.serverconfig.httpd.authz

When I set it up and used it before, I used the mod_authz_svn module to 
control who could do what (many developers, many projects).

Can the non-authenticated user do commits as well as checkouts?

Hugh