Content
Repository using existing subversion repo, will not authorize properly (500)
Added by Christopher Bonitz over 8 years ago
Thank you for taking your time to read this.
This has been troubling me since I upgraded to 5.0
Setup
- Type: manual installation
- OS: debian
- Database: postgres
So, I have everything working now with the exception of repository integration,
I used to have this integration in the 4.* versions, so I miss it, and therefore have put in quiet some effort to resolve this.
My setup
The server currently hosting openproject serves subversion as well,
I want to use this subversion server, not the new managed repository
(later, I will consider using the managed repositories)
The svn server uses https (signed certificate)
openproject uses http.
Troubleshooting
- These are the relevant administrative settings
- Autofetch repository changes: checked
- Enable…. web service: checked
- Enabled SCM: subversion checked
- Automatic repo vendor type: —
Disable automatic createion—(no other options) - Repo encoding: blank
- Caching for authentication: unchecked
- Project settings -> Repository (this is tested in a browser to make sure authentication is okay)
- URL to repo: https://my.domain.com/svn/myproject/
- Repo. username: myusername
- Repo. password: mypassword
- Click save: success
- Go to the “Repository” tab: 500 (popup with An error orcurred when trying to access the repository: you are not authorized to access the repository or the credentials are invalid.
- log/production.log: Completed 500 Internal Server Error in 44ms (Views: 19.5ms | ActiveRecord: 2.4ms)
- the apache access and error log, does not mention anything.
- the other_vhost_access log, mentions the request, but does not supply anything useful.
What I have tried so far
I tried to mess around with rake, to migrate the database again, and make sure no errors comes out.
jobs:workoff seems to work fine, there is no errors in the openproject mail either.
tried to mess around with the scm in configuration.yml
(there are some other settings under default: but this is not relevant here I guess)
production: rails_cache_store: :memcache scm: subversion: client_command: /usr/bin/svn
The links on the manual installation pages still does not point to the guide, so until now I feel like walking blind.
I would appreciate it a lot, if someone could point me in the right direction here.
Replies (7)
I accidentally stumbled upon a workaround.
It does not fix the problem in question, but it does allow me to use my repo again.
If I use the file:// connectivity approach, I can connect to the repo.
I did try this a few times, but every time my url was built wrong.
file://my/path/to/repo/myproject/
where I was supposed to use this instead
file:///my/path/to/repo/myproject/
I guess this makes sense now. (needing an extra / to show the absolute path)
But honestly, your comment could be improved, a very obvious typo trap, that could have been handled with an example…
Hope this helps someone out there.
Hey Christopher,
When accessing through
file:///
url:three slashes are mandatory for file URLs when omitting the hostname. Alternatively,
file://localhost/my/path
should also work.For https access:
I’ve recently added a SSL validation workaround for acccessing SVN repositories where the certificate isn’t trusted. Can you test whether this fixes your issue?
https://community.openproject.org/work_packages/4197
To use it, add
trustedssl: true
to yoursubversion:
configuration (please ensure you’re running the most recent released version, 5.0.16 before trying this):You can also verify that you’re hit by this problem if manually using
svn info <https://URL>
requires you to temporarily / permanently accept the certificate.Best,
Oliver
Hey Oliver.
Thank you for your reply, the improvements was very much welcome. So thank you.
Regarding using localhost in the url, it didn’t do the trick for me.
(still getting the http error 500)
Moving on I did a manual upgrade to version 5.0.16
for testing your https access validation workaround.
(Manual install actually forced me to do a full reinstall using the better part of a day here, sigh )
After getting everything up and running again, I tried adding the trustedssl: true
apparently it didn’t change anything in my scenario, I didn’t expect that either, since the certificate is signed.
I like the fact that it is possible now, so thanks for that anyway.
The svn info cmd did not ask for anything. (so I guess it accepts the certificate)
Thanks for your help.
Hi Christopher,
thanks for the follow up. Do you get any output of the form
SVN access error: <...>
in your production log?A side question: Why did you choose a manual installation over the packaged one?
Best,
Oliver
Yes, I do have something in my production log.
And surprisingly it seems to show that I actually have a SSL certificate issue (some info is removed)
Please guide me in how to proceed from here, I would love to get into the bottom of this.
The reason for the manual install is because the packaged install is lacking the PostgreSQL adapter
With a background as DBA, I find MySQL so limited, that I simply refuse to use it.
I guess the short answer is “personal reasons”
Ps.
This is the production specific configuration, from my configuration.yml
Hey Christopher,
the following line is what got me to add that workaround from https://community.openproject.org/work_packages/4197/activity
E, [2016-03-19T22:21:24.459528 #9953] ERROR -- : SVN access error: svn: E230001: Server SSL certificate verification failed: issuer is not trusted
Did you restart the server after you added the SSL configuration option?
Best,
Oliver
Hi Oliver
Yeah, I did the
But to make sure, I just did a full restart of apache,
and you know what? now it works.
The oldest most used trick in the book, a freaking restart.
Well. Thanks a bunch, feels good to know the issue is solved, and that I might have helped in the process finding it.
Best regards.
Christopher.