SVN Authentication with AD Users via Likewise-Open?

JM,

Logging into the Repository server as an AD user, checking out the helloworld repository and then checking it back in results in:

• svn: Commit failed (details follow):
• svn: Authorization failed

SVN appears to be using some other mechanism (apart from just file/folder permissions) to control which users have write access to the repository.

Hi JM,

Yes I'm fairly sure.  Details of the setup are below:

I moved the contents of /srv/repos (bzr, git, hg, svn folders) to /mnt/repo, and created symlinks to the new location of each folder.

The owner & group for the symlinks is root/root.

The owner of each of the folders in /mnt/repo is root, however the group is an AD group - this permission was applied recursively: 

• cd /mnt/repo 
• chgrp -R "groupname" *

The permissions applied to these folders are 775.

• chmod -R 775 *

Inside the /mnt/repo/svn folder are 3 repositories (including the default helloworld).

I can checkout the helloworld repository using:

svn co svn://<repo address>/svn/helloworld

However trying to commit changes results in "Authorization failed".

If I modify the svnserve.conf file in the helloworld/conf folder, and set anon-access = write, then I can commit without error (but anonymously, which is useless).

Any suggestions for how to enable my AD users to commit to the repositories would be greatly appreciated :)

The svnserve.conf file is vanilla for the Turnkey rcs image, and hasn't been modified:

• [general]
• # anon-access = read
• # auth-access = write
• # password-db = passwd
• # authz-db = authz
• # realm = My First Repository
• [sasl]
• # use-sasl = true
• # min-encryption = 0
• # max-encryption = 256

sasl is enabled (by default), and svnserve is build with sasl support.