authz File ignored?

[d***@visetics.de]

Hello,

i am using SVN via mod_dav_svn in apache. The user authentification is processed via NTLM. Later wehen the user is authenticated, i would like to have a authz file what ensures, that the person is permitted to access the svn repository and path. The configuration:
=== 8< ===
<VirtualHost svn-repository.intern.xxxxx.de:1234>
DocumentRoot /export/home/svn-test/repository
ServerName svn-repository.intern.xxxxx.de
<Location /svn>
AuthName "ZVD-Wiki"
AuthType NTLM
NTLMAuth on
NTLMAuthoritative off
NTLMDomain xxxxx_xxxxx
NTLMServer xxxxx-xxxxx
NTLMBackup xxxxx-xxxxx
NTLMBasicAuth on
Require valid-user
Options +Indexes
Satisfy Any
DAV svn
SVNParentPath /export/home/svn-test/repository
AuthzSVNAccessFile "/export/home/svn-test/repository/my.authz"
Order allow,deny
Allow from all
</Directory>
</Location>
</VirtualHost>
=== 8< ===
The configuration is working so far. Not working is that the authenticated user got no access denied when he wants accessing folders in projects whats not in the authz. The truss command also told me that no one access the /export/home/svn-test/repository/my.authz file.

I am very thankful for your support.
Thanks
Daniel

[Konstantin Kolinko]

Hi!

You are using

Post by d***@visetics.de
Satisfy Any

and

Post by d***@visetics.de
Order allow,deny
Allow from all

thus accessing from any IP address is sufficient to satisfy the
checks. Thus, no need to validate the user.

http://httpd.apache.org/docs/2.2/mod/core.html#satisfy

Use Satisfy All instead.

Best regards,
Konstantin Kolinko

Post by d***@visetics.de
Hello,
(...)
The configuration is working so far. Not working is that the authenticated user got no access denied when he wants accessing folders in projects whats not in the authz. The truss command also told me that no one access the /export/home/svn-test/repository/my.authz file.
I am very thankful for your support.
Thanks
Daniel

[Daniel Rindt]

Post by Konstantin Kolinko
thus accessing from any IP address is sufficient to satisfy the
checks. Thus, no need to validate the user.
http://httpd.apache.org/docs/2.2/mod/core.html#satisfy
Use Satisfy All instead.

The problem is still persisting. I have here again the vhost:
=== 8< ===
<VirtualHost svn-repository.intern.********.de:1234>
DocumentRoot /export/home/svn-test/repository
ServerName svn-repository.intern.********.de
<Location /svn>
AuthName "ZVD-Wiki"
AuthType NTLM
NTLMAuth on
NTLMAuthoritative off
NTLMDomain ZDF_MAINZ
NTLMServer bmaiz-dcmz01
NTLMBackup bmaiz-dcmz05
NTLMBasicAuth on
Require valid-user
Options +Indexes

DAV svn
SVNParentPath /export/home/svn-test/repository
AuthzSVNAccessFile "/export/home/svn-test/repository/my.authz"

Order allow,deny
Allow from all
</Location>
</VirtualHost>
=== 8< ===

I read the docs and got not really clued about the problem. Maybe there
are issues in the usage of the modules?

many TIA for your support
Daniel