timmjd added a comment - 20/Jul/2010 11:57 PM I figured out a hack with Apache configfile Macros. Not soo nice but minimal config overhead for a bunch of repositories: <Macro crowd $svn_path $crowd_group> <Location /svn/$svn_path/> DAV svn SVNPath /mnt/svnroot/$svn_path/ AuthName Crowd-Login AuthType Basic require valid-user PerlAuthenHandler Apache::CrowdAuth PerlAuthzHandler Apache::CrowdAuthz PerlSetVar CrowdAppName user PerlSetVar CrowdAppPassword pass PerlSetVar CrowdSOAPURL localhost:8095/crowd/services/SecurityServer PerlSetVar CrowdAllowedGroups '$crowd_group' </Location> </Macro> For instancing the repository from inside the apache config file: Use crowd foo_repo 'groupA, groupB' Use crowd bar_repo 'groupA, groupB' For geting the SVNParentPath listing: <Location /svnlist> DAV svn RedirectMatch ^/svnlist/(.+) /svn/$1 SVNParentPath /mnt/svnroot SVNListParentPath On </Location> So finaly you can use: hxxp://localhost/svnlist (to display the repository listing) hxxp://localhost/svn/foo_repo/ (to access a single repository) Does anybody know how to get my listing to hxxp://localhost/svn ?

Rob Kooper added a comment - 22/Jun/2010 3:18 PM Here is what I did to get SVNParentPath to work. No guarantees. Apply the following patch to Crowd-Apache-Connector-1.2.3.zip, and install as normally. This patch will do the path check as before, but if it fails it will take the first element in the path and treat it as the repository, so for example when checking for access to /bar/trunk/folder it will first check that folder in the svn.auth file. If no match is found it will check for bar:/trunk/folder in the svn.auth file. diff -cr apachecrowd.orig/Atlassian-Crowd-1.2.3/lib/Atlassian/Crowd.pm apachecrowd/Atlassian-Crowd-1.2.3/lib/Atlassian/Crowd.pm *** apachecrowd.orig/Atlassian-Crowd-1.2.3/lib/Atlassian/Crowd.pm 2009-03-02 05:08:25.000000000 -0600 --- apachecrowd/Atlassian-Crowd-1.2.3/lib/Atlassian/Crowd.pm 2010-06-21 23:40:22.750190714 -0500 *************** *** 387,392 **** --- 387,393 ---- my $access_specified = ''; my $access_granted = 0; my $working_path = $repos_path; + my $parentpath; if($access eq "rw") { $access = "wr"; *************** *** 405,411 **** PATH: while($working_path ne '') { $access_specified = evaluate_single_path_authz($section_hash, $working_path, $user, $groups); ! #Test::More::diag("WORKING_PATH: $working_path -> $access_specified"); if($access_specified ne 'n') { last PATH; --- 406,416 ---- PATH: while($working_path ne '') { $access_specified = evaluate_single_path_authz($section_hash, $working_path, $user, $groups); ! if($access_specified eq 'n' && $working_path ne '/') { ! ($parentpath = $working_path) =~ s/^\/([^\/]*)\/?/$1:\//; ! $access_specified = evaluate_single_path_authz($section_hash, $parentpath, $user, $groups); ! } ! #Test::More::diag("WORKING_PATH: $working_path -> $access_specified"); if($access_specified ne 'n') { last PATH; Next make sure your svn.auth file uses [<repository>:<path>] notations, you can also use [<repository>/<path>] if you want. For example, the following will give anybody read access and only those in group 'foo' write access to repository 'bar': [/] * = r [bar:/] @foo = rw Finally mke sure you set up your location for SSL, this is what we use: # SVN <Location /svn> # Uncomment this to enable the repository DAV svn # Set this to the path to your repository SVNParentPath /home/svn SVNListParentPath on # use autoversioning for dav clients SVNAutoVersioning on # Authentication AuthName crowd AuthType Basic PerlAuthenHandler Apache::CrowdAuth PerlSetVar CrowdAppName subversion PerlSetVar CrowdAppPassword xyz PerlSetVar CrowdSOAPURL http://localhost:8095/crowd/services/SecurityServer # Autorization PerlAccessHandler Apache::CrowdAuthz->access_handler PerlAuthzHandler Apache::CrowdAuthz PerlSetVar CrowdAuthzSVNAccessFile /home/svn/svn.auth Satisfy Any Require valid-user # The following three lines allow anonymous read, but make # committers authenticate themselves. <LimitExcept GET PROPFIND OPTIONS REPORT> Require valid-user </LimitExcept> </Location> Please let me know if this does or does not work, it seems to work in our case.