FedoraForum.org - Fedora Support Forums and Community
Results 1 to 5 of 5
  1. #1
    Join Date
    Sep 2017
    Location
    Denmark
    Posts
    3

    Smile "Oldschool" subversion-server installation help needed.

    Subversion (svnserve) troubleshooting:
    Hi Fedora Forum

    I am trying to setup a svnserve server using the basic svn protocol. This is primarily for learning/relearning and eventually I will probably enable a webinterface for the server.
    But for the moment I do not want a running apache server to access the subversion repositories through http/https.

    Requirements for my setup.
    - Use oldschool svn://iportno/repo access method.
    - Basic file based authentication for now.
    - Authentication without config-file, so each repo has its own config-, authz-db and passwd-db file.
    - My own repository mount-point on my btrfs-mirror: /mnt/svn_root_folder

    I have done the following:
    - Made a restricted svn user and svn group. No login. Not a real system user, but a locked account because the user gui (system-config-users) didn't support making a clean system user account.
    I am using the group id right now and not the user id since fedora starts svnserve as root using systemd.

    - The svn_root_folder mount-point is owned by root:svn. I have confirmed that the users who are members of the svn group can read and write to the mount-point aswell as root.

    - svnserve is started using this /etc/sysconfig/svnserve setup:
    - OPTIONS="--log-file=/mnt/svn_root_folder/svnserve/svnserve.log -r /mnt/svn_root_folder/repositories
    --listen-host=SERVER-IP-ADDRESS --listen-port=MY_CUSTOM_PORT"

    - I have put SELinux in permissive mode for svnserve_t labels. This is to avoid that SELinux interfering with svnserve during basic installation and test. I plan on activating SELinux again to learn how to give a simple server process access through the SELinux MAC layer.

    - I have confirmed that the port chosen for the service is open in firewalld using netcat (nc) from another pc on my lan.
    I added it using:
    firewall-cmd --permanent --add-port=4690/tcp
    and reloaded using:
    firewall-cmd –reload

    Current problem:
    - If I start svnserve with --listen-host=My_Specific_Ip it fails to start with the error:
    svnserve: E000099: Can't bind server socket: Cannot assign requested address

    - If I start svnserve with --listen-host=0.0.0.0 the service is running.
    If I try to checkout a repository it fails:
    - svn co svn://SERVER-IP-ADDRESS:MY_CUSTOM_PORT/repository
    Error:
    svn: E170013: Unable to connect to a repository at URL 'svn://SERVER-IP-ADDRESS:MY_CUSTOM_PORT/repository'
    svn: E170001: No access allowed to this repository

    I have tried creating a new repository using svnadmin create repository_name.
    - Added svnserve.conf
    [general]
    passwd-db = /mnt/svn_root_folder/repositories/repository1/conf/passwd
    authz-db = /mnt/svn_root_folder/repositories/repository1/conf/authz
    anon-access = none
    #auth-access = write
    realm = hostname

    - authz
    [groups]
    admin = admin_user
    users = user_name

    [/]
    @admin = rw
    * =

    [/repository1]
    @admin = rw
    @users = rw
    * =

    [/repository2]
    @admin = rw
    user_name = rw
    * =

    - passwd
    [users]
    user_name = userPassword

    I also tried to import an existing reposity and updated the config files also without luck.

    Is it a firewall rule that i'm not defining? I prefer having svnserve only listening on my primary nic, since I only plan on accessing my repositories using my lan.

  2. #2
    Join Date
    Jan 2015
    Location
    Al Ain, UAE
    Posts
    736

    Re: "Oldschool" subversion-server installation help needed.

    "svn: E170001: No access allowed to this repository"

    First, change the SELinux configuration so that it is not enforcing, then try again.
    --
    Have fun!
    http://www.aeronetworks.ca

  3. #3
    Join Date
    Sep 2017
    Location
    Denmark
    Posts
    3

    Re: "Oldschool" subversion-server installation help needed.

    Hi Flyingdutchman
    I'm already testing this in permissive mode. I tried this both just making the label svnserve_t permissive and booting in full permissive mode with no success.

  4. #4
    Join Date
    Jan 2015
    Location
    Al Ain, UAE
    Posts
    736

    Re: "Oldschool" subversion-server installation help needed.

    Then check which user svn is running as with ps and ensure that the directories are indeed owned by that user.
    --
    Have fun!
    http://www.aeronetworks.ca

  5. #5
    Join Date
    Sep 2017
    Location
    Denmark
    Posts
    3

    Re: "Oldschool" subversion-server installation help needed.

    As stated in my original post the svn root folder is owned by root:svn, because svnserve runs as a daemon and according to ps aux is owned by root.

Similar Threads

  1. Can't access "lost+found" or "root" in "Computer" directory
    By jeb3121 in forum Installation, Upgrades and Live Media
    Replies: 5
    Last Post: 27th November 2013, 04:36 PM
  2. Replies: 1
    Last Post: 21st November 2011, 04:09 AM
  3. MySQL: "plugin" and "server" tables corrupt?
    By mbratch in forum Using Fedora
    Replies: 4
    Last Post: 7th February 2010, 02:22 AM
  4. Replies: 0
    Last Post: 23rd May 2005, 04:59 AM
  5. Installation of "small server" (FC1) - a bunch of questions
    By bjoel in forum EOL (End Of Life) Versions
    Replies: 2
    Last Post: 26th July 2004, 05:31 AM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •