Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 6th May 2009, 12:11
schildhans schildhans is offline
Junior Member
 
Join Date: May 2009
Posts: 6
Thanks: 0
Thanked 0 Times in 0 Posts
Default access right questions: jailroot & svnadmin & apache

Hi,

I plan to install ISPConfig3 on my vServer but I have a few questions before which could not be answered by searching the internet.
I need to install for 3 clients also a SVN repository.
I plan to make a subdomain for each client called svn.domain.tld.
But I am not sure about the access rights.
I would like to give every user the possibility to log in over ssh (with chailroot)
that they can execute svnadmin create repositoryname.
But when accessing svn.domain.tld apache should deliver the repository with
WEBSvn (http://websvn.tigris.org/) and the repository should be registered with svn-access-manager.
Now I am not sure about two things:
- how can i make sure that the users can use the svnadmin command in the jail root?
- how have i set the user rights of the repository? Theoretically if the user creates it and the subdomain uses suexec the repository should be writeable for that user from within the php access manager?

I have no installation of ISPConfig3 here to test, so I have to do a complete switch.
Any suggestions on complete that task?

schildhans
Reply With Quote
Sponsored Links
  #2  
Old 6th May 2009, 19:06
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,478
Thanks: 813
Thanked 5,255 Times in 4,121 Posts
Default

1) add svnadmin to the list of jailed applications.
2) Setting up the user rights for the repository is not related to ispconfig, you should take a look at one of the the svn guides on the svn homepage.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 6th May 2009, 21:49
schildhans schildhans is offline
Junior Member
 
Join Date: May 2009
Posts: 6
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by till View Post
1) add svnadmin to the list of jailed applications.
2) Setting up the user rights for the repository is not related to ispconfig, you should take a look at one of the the svn guides on the svn homepage.
1) done, but the client allways gets unknown command for svnadmin. I have in chrooted applications /usr/bin/svnadmin and in app section svnadmin.
2) I thin I was not precise enough. I did not mean the access rights for the svn repository. What I mean is the following. Lets asume i have a user client1 with a domain svn.domain.tld where he wants to have his repository available.
I would configure apache like tis:
Code:
<Location /svn/repos>

  DAV svn

  SVNParentPath /path/top/his/home/repos

  AuthType Basic
  AuthName "Subversion Repository"
  AuthUserFile /path/top/his/home/svn-passwd
  AuthzSVNAccessFile /path/top/his/home/svn-access
  Require valid-user

  SVNIndexXSLT /svnstyle/svnindex.xsl

</Location>
But the problem now is: apache has to have read & write access for the repository. But also client 1 has to have read & write access from its jailroot.
Because as far as I understand suExec works only for php execution but not for an access to dav svn. So apache does not run under the client1's user, or am I wrong?

Last edited by schildhans; 6th May 2009 at 21:51. Reason: formating
Reply With Quote
  #4  
Old 7th May 2009, 11:01
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,478
Thanks: 813
Thanked 5,255 Times in 4,121 Posts
 
Default

1) This works only for new clients.
2) apache always runs under the apache user. But thats not a problem at all asll all repos can be owned by the apache user as the login permissions were handled in the svn-passwd
and do not depend on the file permissions and /path/top/his/home/repos
can be anywere on your server and has not to be in the home directory of the user as the user is able to access the repository by webdav and does not has to access the files directly.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
CENTOS 5 Ping Problem gAnDo Server Operation 11 28th March 2008 20:58
Questions about apache version LaoWei General 4 11th January 2008 17:46
Problems with Apache and Updating Jubalint Installation/Configuration 2 21st May 2006 19:50
Problem with the installation of Dokeos (LMS) in ISPConfig jofranco General 4 28th April 2006 00:45
Questions in regards to ISP-Server Setup - Ubuntu 5.10 "Breezy Badger" rbrantley HOWTO-Related Questions 16 10th April 2006 18:26


All times are GMT +2. The time now is 06:45.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.