RADIUS and Subversion config

Hello,

I'm having some problems configuring Apache while serving Subversion=20
Repositories in conjunction with RADIUS authentication.

The basic configuration of Apache with DAV svn works perfectly for anon
access:

DAV svn
SVNParentPath /opt/svn


In addition, I have added the FreeRadius mod_auth_radius module to
Apache and have also managed to get this working:=20

AuthType Basic
AuthName "RADIUS authentication for no reason."
AuthAuthoritative off
AuthRadiusAuthoritative on
AuthRadiusCookieValid 5
AuthRadiusActive On
require valid-user


I assumed that just by concatenating these two fully-functioning
configurations that I would have a working RADIUS-Authenticated
Subversion url:
DAV svn
SVNParentPath /opt/svn
AuthType Basic
AuthName "RADIUS authentication."
AuthAuthoritative off
AuthRadiusAuthoritative on
AuthRadiusCookieValid 5
AuthRadiusActive On
require valid-user


As you can see, all I did was put the options together in the same
directive. However, when I try to view the url in a web
browser, I am presented with a 404 error after entering a correct
username and password. In the CLI client, I get 405 Method Not Allowed.
I speculate that once RADIUS authentication is completed, the request is
interpreted to be a literal filesystem path within DocumentRoot and my
DAV Svn instruction is ignored.

Is there any solution to configure Apache to permit RADIUS-authenticated
access to Subversion repositories? I would very much appreciate any
pointers, assistance or guidance you may have.

Thank you.

- Dave Heppenstall
david.heppenstall AT rci DOT rogers DOT com

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: RADIUS and Subversion config

On Tue, Mar 07, 2006 at 10:45:58AM -0500, David Heppenstall wrote:
> I'm having some problems configuring Apache while serving Subversion
> Repositories in conjunction with RADIUS authentication.

There is an age-old bug in mod_auth_radius which causes spurious 404
errors with pretty much any use of DAV in Apache:

http://mailman.lyra.org/pipermail/dav-dev/2001-January/00189 7.html

just find the section of code in mod_auth_radius where it returns
HTTP_NOT_FOUND and remove it.

Regards,

joe

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: RADIUS and Subversion config

Chaps,

Joe Orton wrote:
> On Tue, Mar 07, 2006 at 10:45:58AM -0500, David Heppenstall wrote:
>> I'm having some problems configuring Apache while serving Subversion
>> Repositories in conjunction with RADIUS authentication.
>
> There is an age-old bug in mod_auth_radius which causes spurious 404
> errors with pretty much any use of DAV in Apache:
>
> http://mailman.lyra.org/pipermail/dav-dev/2001-January/00189 7.html
>
> just find the section of code in mod_auth_radius where it returns
> HTTP_NOT_FOUND and remove it.

Apologies for the lateness of this reply but you may also like to try
mod_auth_xradius: http://www.outoforder.cc/projects/apache/mod_auth_xradius/

HTH,


Neil.

--
Neil Hillard hillardn@whl.co.uk
Westland Helicopters Ltd. http://www.whl.co.uk/

Disclaimer: This message does not necessarily reflect the
views of Westland Helicopters Ltd.

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

RE: RADIUS and Subversion config

Good morning gentlemen,

Thank you very much for both of those suggestions, I'll try them both in
succession asap.

- Dave


> -----Original Message-----
> From: Neil A. Hillard [mailto:hillardn@whl.co.uk]=20
> Sent: Monday, March 20, 2006 6:36 AM
> To: David Heppenstall; users@httpd.apache.org
> Subject: Re: [users@httpd] RADIUS and Subversion config
>=20
>=20
> Chaps,
>=20
> Joe Orton wrote:
> > On Tue, Mar 07, 2006 at 10:45:58AM -0500, David Heppenstall wrote:
> >> I'm having some problems configuring Apache while serving=20
> Subversion
> >> Repositories in conjunction with RADIUS authentication.
> >=20
> > There is an age-old bug in mod_auth_radius which causes spurious 404
> > errors with pretty much any use of DAV in Apache:
> >=20
> > http://mailman.lyra.org/pipermail/dav-dev/2001-January/00189 7.html
> >=20
> > just find the section of code in mod_auth_radius where it returns
> > HTTP_NOT_FOUND and remove it.
>=20
> Apologies for the lateness of this reply but you may also like to try=20
> mod_auth_xradius:=20
> http://www.outoforder.cc/projects/apache/mod_a> uth_xradius/
>=20
>=20
> HTH,
>=20
>=20
> Neil.
>=20
>=20
> --=20
> Neil Hillard hillardn@whl.co.uk
> Westland Helicopters Ltd. http://www.whl.co.uk/
>=20
> Disclaimer: This message does not necessarily reflect the
> views of Westland Helicopters Ltd.
>=20

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

RE: RADIUS and Subversion config

Thanks again,

Commenting out the three lines of code regarding returning the 404 works
like a dream.

Many thanks,

- Dave

> -----Original Message-----
> From: David Heppenstall=20
> Sent: Monday, March 20, 2006 8:59 AM
> To: Neil A. Hillard; users@httpd.apache.org
> Subject: RE: [users@httpd] RADIUS and Subversion config
>=20
>=20
> Good morning gentlemen,
>=20
> Thank you very much for both of those suggestions, I'll try=20
> them both in succession asap.
>=20
> - Dave
>=20
>=20
> > -----Original Message-----
> > From: Neil A. Hillard [mailto:hillardn@whl.co.uk]
> > Sent: Monday, March 20, 2006 6:36 AM
> > To: David Heppenstall; users@httpd.apache.org
> > Subject: Re: [users@httpd] RADIUS and Subversion config
> >=20
> >=20
> > Chaps,
> >=20
> > Joe Orton wrote:
> > > On Tue, Mar 07, 2006 at 10:45:58AM -0500, David Heppenstall wrote:
> > >> I'm having some problems configuring Apache while serving
> > Subversion
> > >> Repositories in conjunction with RADIUS authentication.
> > >=20
> > > There is an age-old bug in mod_auth_radius which causes=20
> spurious 404=20
> > > errors with pretty much any use of DAV in Apache:
> > >=20
> > > http://mailman.lyra.org/pipermail/dav-dev/2001-January/00189 7.html
> > >=20
> > > just find the section of code in mod_auth_radius where it returns=20
> > > HTTP_NOT_FOUND and remove it.
> >=20
> > Apologies for the lateness of this reply but you may also=20
> like to try
> > mod_auth_xradius:=20
> > http://www.outoforder.cc/projects/apache/mod_a> uth_xradius/
> >=20
> >=20
> > HTH,
> >=20
> >=20
> > Neil.
> >=20
> >=20
> > --=20
> > Neil Hillard hillardn@whl.co.uk
> > Westland Helicopters Ltd. http://www.whl.co.uk/
> >=20
> > Disclaimer: This message does not necessarily reflect the
> > views of Westland Helicopters Ltd.
> >=20
>=20
> ------------------------------------------------------------ ---------
> The official User-To-User support forum of the Apache HTTP=20
> Server Project. See=20
> for more info.=20
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>=20

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org