Re: Subversion behind apache 2.4 proxy - Connection refused

2023-12-04 Thread Daniel Sahlberg
Den mån 4 dec. 2023 kl 14:29 skrev Gunnar Grim :

> Hi!
>
> Thanks for your reply. Just hearing that my setup looks OK made me look
> deeper, with Wireshark. Found that svn was using IPV6 but firefox used
> IPV4. Apparently the proxy can't handle IPV6 so I am now using a hostname
> wihout any IPV6 address in /etc/hosts and everything works fine.
>
> Thanks again,
> Gunnar
>

Thanks for coming back to the list with your solution.

It sounds a bit strange that Apache httpd wouldn't be able to proxy IPv6
traffic. Have you checked the Listen directives in your httpd config? Maybe
it is only listening on IPv4 ports (check with lsof -i)?

Kind regards,
Daniel



> On 2023-12-03 22:02, Daniel Sahlberg wrote:
>
> Den sön 26 nov. 2023 kl 18:31 skrev Gunnar Grim :
>
>> Hi!
>>
>> I have subversion running in a Docker container and everything works fine
>> if I connect directly to it, but I really need to run subversion behind an
>> Apache 2.4 proxy. For now I'm not using https, just trying to get it to
>> work with as simple setup as possible.
>>
>> I have tried to use the FAQ instructions,
>> https://subversion.apache.org/faq.html#reverseproxy, but they are
>> written for an older Apache version so I have tried to modify them for 2.4.
>>
>> Browsing the repos with Firefox works fine but it fails with the svn
>> client and SmartSVN:
>>
>> svn info http://localhost/svn/test/svn-test-project
>> svn: E170013: Unable to connect to a repository at URL '
>> http://localhost/svn/test/svn-test-project'
>> svn: E000111: Error running context: Connection refused
>>
>> It sounds really strange that browsing with Firefox would work but not
> the svn command line client. The error is exactly the one to be expected if
> there is no server running at all (or possibly if there is a firewall or
> security policy disabling network access for the svn program).
>
> If you try to access http://localhost/svn/test/svn-test-project with curl
> or wget? The same question for http://localhost:7280/svn/
>
> I assume svn info http://localhost:7280/svn/test/svn-test-project works
> as expected?
>
>
>> This is my proxy configuration:
>>
>>ProxyRequests Off
>>ProxyVia on
>>
>>
>>Require all granted
>>
>>
>>ProxyPass /svn/ http://localhost:7280/svn/
>>
>>  ProxyPassReverse http://localhost:7280/svn/
>>  > MKCOL MOVE COPY DELETE LOCK UNLOCK MERGE>
>>  Require all granted
>>  
>>  RewriteCond %{HTTP:Destination} .+/(svn/.*$)
>>  RewriteRule ^/svn/.* - [E=MyDestination:http://localhost:7280/%1,PT]
>>
>>  RequestHeader set Destination %{MyDestination}e env=MyDestination
>>
>>
>>
>> When I use the browser all accesses are logged but with the svn client
>> nothing is logged to the access- or error logs, even with log level debug.
>>
>> Hope someone can see what is wrong with my configuration.
>>
> On a cursory look all seems fine, but I didn't try to replicate your setup
> yet.
>
>> TIA,
>> Gunnar
>>
>>
>>
> Kind regards,
> Daniel Sahlberg
>
>


Re: Subversion behind apache 2.4 proxy - Connection refused

2023-12-04 Thread Gunnar Grim

Hi!

Thanks for your reply. Just hearing that my setup looks OK made me look 
deeper, with Wireshark. Found that svn was using IPV6 but firefox used 
IPV4. Apparently the proxy can't handle IPV6 so I am now using a 
hostname wihout any IPV6 address in /etc/hosts and everything works fine.


Thanks again,
Gunnar

On 2023-12-03 22:02, Daniel Sahlberg wrote:

Den sön 26 nov. 2023 kl 18:31 skrev Gunnar Grim :

Hi!

I have subversion running in a Docker container and everything
works fine if I connect directly to it, but I really need to run
subversion behind an Apache 2.4 proxy. For now I'm not using
https, just trying to get it to work with as simple setup as possible.

I have tried to use the FAQ instructions,
https://subversion.apache.org/faq.html#reverseproxy, but they are
written for an older Apache version so I have tried to modify them
for 2.4.

Browsing the repos with Firefox works fine but it fails with the
svn client and SmartSVN:


svn info http://localhost/svn/test/svn-test-project
svn: E170013: Unable to connect to a repository at URL
'http://localhost/svn/test/svn-test-project'
svn: E000111: Error running context: Connection refused


It sounds really strange that browsing with Firefox would work but not 
the svn command line client. The error is exactly the one to be 
expected if there is no server running at all (or possibly if there is 
a firewall or security policy disabling network access for the svn 
program).


If you try to access http://localhost/svn/test/svn-test-project with 
curl or wget? The same question for http://localhost:7280/svn/


I assume svn info http://localhost:7280/svn/test/svn-test-project 
works as expected?


This is my proxy configuration:

   ProxyRequests Off
   ProxyVia on

   
   Require all granted
   

   ProxyPass /svn/ http://localhost:7280/svn/
   
 ProxyPassReverse http://localhost:7280/svn/
 
 Require all granted
 
 RewriteCond %{HTTP:Destination } .+/(svn/.*$)
 RewriteRule ^/svn/.* -
[E=MyDestination:http://localhost:7280/%1,PT]
 RequestHeader set Destination %{MyDestination}e
env=MyDestination



When I use the browser all accesses are logged but with the svn
client nothing is logged to the access- or error logs, even with
log level debug.

Hope someone can see what is wrong with my configuration.

On a cursory look all seems fine, but I didn't try to replicate your 
setup yet.


TIA,
Gunnar



Kind regards,
Daniel Sahlberg

Re: Subversion behind apache 2.4 proxy - Connection refused

2023-12-03 Thread Daniel Sahlberg
Den sön 26 nov. 2023 kl 18:31 skrev Gunnar Grim :

> Hi!
>
> I have subversion running in a Docker container and everything works fine
> if I connect directly to it, but I really need to run subversion behind an
> Apache 2.4 proxy. For now I'm not using https, just trying to get it to
> work with as simple setup as possible.
>
> I have tried to use the FAQ instructions,
> https://subversion.apache.org/faq.html#reverseproxy, but they are written
> for an older Apache version so I have tried to modify them for 2.4.
>
> Browsing the repos with Firefox works fine but it fails with the svn
> client and SmartSVN:
>
> svn info http://localhost/svn/test/svn-test-project
> svn: E170013: Unable to connect to a repository at URL '
> http://localhost/svn/test/svn-test-project'
> svn: E000111: Error running context: Connection refused
>
> It sounds really strange that browsing with Firefox would work but not the
svn command line client. The error is exactly the one to be expected if
there is no server running at all (or possibly if there is a firewall or
security policy disabling network access for the svn program).

If you try to access http://localhost/svn/test/svn-test-project with curl
or wget? The same question for http://localhost:7280/svn/

I assume svn info http://localhost:7280/svn/test/svn-test-project works as
expected?


> This is my proxy configuration:
>
>ProxyRequests Off
>ProxyVia on
>
>
>Require all granted
>
>
>ProxyPass /svn/ http://localhost:7280/svn/
>
>  ProxyPassReverse http://localhost:7280/svn/
>   MKCOL MOVE COPY DELETE LOCK UNLOCK MERGE>
>  Require all granted
>  
>  RewriteCond %{HTTP:Destination} .+/(svn/.*$)
>  RewriteRule ^/svn/.* - [E=MyDestination:http://localhost:7280/%1,PT]
>  RequestHeader set Destination %{MyDestination}e env=MyDestination
>
>
>
> When I use the browser all accesses are logged but with the svn client
> nothing is logged to the access- or error logs, even with log level debug.
>
> Hope someone can see what is wrong with my configuration.
>
On a cursory look all seems fine, but I didn't try to replicate your setup
yet.

> TIA,
> Gunnar
>
>
>
Kind regards,
Daniel Sahlberg