Difference between revisions of "NDPFSubVersion"

From PDP/Grid Wiki
Jump to navigationJump to search
m
 
m
Line 1: Line 1:
 
= NDPF Subversion Repository =
 
= NDPF Subversion Repository =
  
The NDPF Subversion service is hosted on '''ndpfsvn.nikhef.nl''' (currently an alias for sikkel.nikhef.nl). This machine runs an SVN WebDAV instance hosted in Apache 2.2 on a CentOS 5.1 x86_64 box.
+
The NDPF subversion WebDAV service is hosted on '''ndpfsvn.nikhef.nl''':
  
== User login ==
+
https://ndpfsvn.nikhef.nl/repos/repository-name
  
The apache "/repos/" location uses compulsory SSL basic authentication, using the username/password combination from the NDPF LDAP directory on hooimijt. In order to be successfully authorized to access the repository at all, the DN of this user '''must''' be listed in the LDAP group  
+
where ''repository-name'' should be replaced with the real name, e.g. '''ndpf''':
 +
 
 +
https://ndpfsvn.nikhef.nl/repos/ndpf
 +
 
 +
is a real and working repository (although with a rather strict access list).
 +
 
 +
It is currently an alias for sikkel.nikhef.nl: the system runs an Apache SVN WebDAV instance hosted on a CentOS 5.1 x86_64 box.
 +
 
 +
 
 +
== User authentication and authorization ==
 +
 
 +
The user login is the same as the one used for unix login on the NDPF systems (i.e. it uses the very same LDAP directory for authentication). It's that easy.
 +
 
 +
In order to be successfully authorized to access the repository at all, the DN of this user '''must''' be listed in the LDAP group  
  
 
  cn=nDPFSubVersionUsers,ou=DirectoryGroups,dc=farmnet,dc=nikhef,dc=nl
 
  cn=nDPFSubVersionUsers,ou=DirectoryGroups,dc=farmnet,dc=nikhef,dc=nl
  
 
If you are not there, you cannot get in, regardless of your login-capability on bosui &c.
 
If you are not there, you cannot get in, regardless of your login-capability on bosui &c.
 +
 +
of course, also the apache "/repos/" location uses compulsory SSL basic authentication, again using the username/password combination from the NDPF LDAP directory on hooimijt.
 +
  
 
== Creating a new repository ==
 
== Creating a new repository ==
Line 28: Line 44:
  
 
Note that you need the system root login in order to create new repositories, or to edit the access.conf file.
 
Note that you need the system root login in order to create new repositories, or to edit the access.conf file.
 +
 +
== CVS access ==
 +
 +
Note that there is still CVS access available as well on '':ssh:''username''@ndpfcvs.nikhef.nl:/cvs/''reponame''.
 +
Authentication is with ssh only, and you must set
 +
 +
CVS_RSH=ssh
 +
export CVS_RSH
 +
 +
before you'll be able to use it. Web browsing is available for a few repositories via:
 +
 +
https://beerput.nikhef.nl/cgi-bin/cvsweb.cgi

Revision as of 22:53, 26 March 2008

NDPF Subversion Repository

The NDPF subversion WebDAV service is hosted on ndpfsvn.nikhef.nl:

https://ndpfsvn.nikhef.nl/repos/repository-name

where repository-name should be replaced with the real name, e.g. ndpf:

https://ndpfsvn.nikhef.nl/repos/ndpf

is a real and working repository (although with a rather strict access list).

It is currently an alias for sikkel.nikhef.nl: the system runs an Apache SVN WebDAV instance hosted on a CentOS 5.1 x86_64 box.


User authentication and authorization

The user login is the same as the one used for unix login on the NDPF systems (i.e. it uses the very same LDAP directory for authentication). It's that easy.

In order to be successfully authorized to access the repository at all, the DN of this user must be listed in the LDAP group

cn=nDPFSubVersionUsers,ou=DirectoryGroups,dc=farmnet,dc=nikhef,dc=nl

If you are not there, you cannot get in, regardless of your login-capability on bosui &c.

of course, also the apache "/repos/" location uses compulsory SSL basic authentication, again using the username/password combination from the NDPF LDAP directory on hooimijt.


Creating a new repository

All repositories are located under

/project/srv/svn/repos/

and this is also the location where the <Location /repos> for the web server configuration is pointing to. Once you have added a new repository, you must edit the access configuration file in

/project/srv/svn/etc/access.conf

and give more than zero people read/write access to the (root of the) new repository. The usernames are derived automatically from the uid attribute of the LDAP directory on hooimijt.

System login

The host itself is a standard grid service box, meaning you need to login using ssh key authentication and forwarding as yourself (only davidg or ronalds can do that at the moment), and then use a further ssh root@localhost. For the console login password, see the usual safebox for the sealed envelope.

Note that you need the system root login in order to create new repositories, or to edit the access.conf file.

CVS access

Note that there is still CVS access available as well on :ssh:username@ndpfcvs.nikhef.nl:/cvs/reponame. Authentication is with ssh only, and you must set

CVS_RSH=ssh
export CVS_RSH

before you'll be able to use it. Web browsing is available for a few repositories via:

https://beerput.nikhef.nl/cgi-bin/cvsweb.cgi