Re: Combining public and private paths

2011-02-10 Thread Victor Sudakov
What the "anon-access = none" option does is remove the ANONYMOUS mech from the list of SASL mechs offered by svnserve (I see this in tcpflow). If this mech is present in the mech list, the svn client does not bother to authenticate even if a valid Kerberos ticket is available. If the svn client h

Re: Combining public and private paths

2011-02-10 Thread Victor Sudakov
The problem is probably in the following. When anon-access is other than "none", svnserve does not request authentication for some important operations like "svn log", and I have found no way to force it to request authentication. This effectively breaks path based authorization. I have found som