Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>Sorry for returning back late! The issue was finally solved. The root cause was the mis-config of Apache authentication!</p> <p>The phenomena is that only the merging log msg were missing, so I tried to take a look at the Apache access log, and found this:</p> <pre><code>10.14.21.75 - - [22/Nov/2012:13:22:05 +0800] "OPTIONS /svn/opencore/branches/ali00304473_Other_20120426_opencore HTTP/1.1" 200 192 10.14.21.75 - - [22/Nov/2012:13:22:05 +0800] "PROPFIND /svn/opencore/branches/ali00304473_Other_20120426_opencore HTTP/1.1" 207 772 10.14.21.75 - - [22/Nov/2012:13:22:05 +0800] "PROPFIND /svn/opencore/!svn/vcc/default HTTP/1.1" 207 1040 </code></pre> <p>No username was identified in the requests! Then I found the SVN access rights for the branch was set to allow EVERYONE to read:</p> <pre><code>[opencore:/branches/ali00304473_Other_20120426_opencore] * = r </code></pre> <p>Furthermore, in <code>httpd.conf</code>, it was configured like this:</p> <pre><code>&lt;Location /svn/&gt; DAV svn SVNParentPath /home/admin/svnroot AuthBasicProvider file ldap AuthType Basic ..... AuthUserFile /home/admin/svnfiles/svn-auth-file Satisfy Any Require valid-user AuthzSVNAccessFile /home/admin/svnfiles/svn-access-file &lt;/Location&gt; </code></pre> <p>So either changing "<code>* = r" to "* =</code>" in the SVN access file, or updating "Satisfy Any" to "Satisfy All" will fix the problem.</p> <p>Conclusion: In our previous config (bad config), when a SVN HTTP request (without auth info) comes to the server, it first handled by Apache httpd. Because httpd was configured as "Satisfy Any", so "Require valid-user" is not a necessary option, so the request was forwarded to MOD_SVN. As the branch was opened to every one (* = r), so MOD_SVN didn't rise the authentication request back to SVN client, it then tried to fetch the logs from repository. But fetching SVN log requires authentication/authorization token, so MOD_SVN just silently failed inside the module, and httpd just returned empty log message to the client.</p>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload