https://www.redmine.org/https://www.redmine.org/favicon.ico?16793021292014-05-26T04:11:36ZRedmineRedmine - Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)https://www.redmine.org/issues/16948?journal_id=564922014-05-26T04:11:36ZMartin Denizet (redmine.org team member)martin.denizet@supinfo.com
<ul></ul><p>I experienced the same problem with Ubuntu 14.04 (Apache 2.4).<br />Though the patch which consists in removing the "if" for anonymous access worked, I was not able to get Git Smart HTTP to work.</p> Redmine - Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)https://www.redmine.org/issues/16948?journal_id=567572014-06-12T07:21:47ZSuppasit Chuwatsawat
<ul></ul><p>I have the same problem as Christian and Martin.<br />Does anybody solve this problem yet?</p> Redmine - Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)https://www.redmine.org/issues/16948?journal_id=578182014-07-31T09:42:01Znicholas tanner
<ul></ul><p>Same troubles here on different instances (all Ubuntu 14.04 64 Bit,) and also on a freshly installed test instance..</p> Redmine - Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)https://www.redmine.org/issues/16948?journal_id=587682014-09-19T21:26:24ZMark Anderson
<ul></ul><p>Am stuck here too - Ubuntu 14/Apache 2.4 combo, 2.5.1 Redmine</p>
<p>Can anyone clarify this - do I remove the whole "if" construct or somehow modify it? removing it means NO handler will be set - is that the hack?</p>
<p>thanks folks!</p>
<p>Martin Denizet (redmine.org team member) wrote:</p>
<blockquote>
<p>I experienced the same problem with Ubuntu 14.04 (Apache 2.4).<br />Though the patch which consists in removing the "if" for anonymous access worked, I was not able to get Git Smart HTTP to work.</p>
</blockquote> Redmine - Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)https://www.redmine.org/issues/16948?journal_id=588422014-09-25T11:09:33ZMartin Denizet (redmine.org team member)martin.denizet@supinfo.com
<ul></ul><p>As far as I understand, the error occurs because there is no handler under certain settings. Removing the "if" removes the problem because then there is a handler every time.<br />I tried to make it work on my Ubuntu test VM hacking the Redmine.pm. I could not get Git Smart HTTP to work with Redmine.pm.<br />I would get a 404 error when trying to clone.<br />I will try again later if I have time.</p> Redmine - Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)https://www.redmine.org/issues/16948?journal_id=647692015-07-10T19:24:11ZJorge S.
<ul></ul><p>I have this also happening in 3.0.2</p>
<p>2 Projects, no one of them public. I get "abort: HTTP Error 500: Internal Server Error" when trying to clone.</p>
<p>If under Settings -> Authentication I set "Authentication required", then I would be prompted for credentials in the clone command.</p> Redmine - Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)https://www.redmine.org/issues/16948?journal_id=653432015-08-08T11:36:37ZCyber Gen
<ul></ul><p>I have discovered that when authentication fails, no matter if it's a public or private project, I always get a 500 error.</p>
<p>I do see a difference in the apache log. When authentication is correct I see no lines in the log. When authentication fails I see this</p>
<p>[Sat Aug 08 13:23:38.727989 2015] [authn_file:error] [pid 8989:tid 139932576245504] [client 192.168.192.100:52376] AH01619: AuthUserFile not specified in the configuration</p>
<p>I beleive this to be a bug in the Redmine.pm file that doesn't return authentication when authentication fails.</p> Redmine - Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)https://www.redmine.org/issues/16948?journal_id=653452015-08-08T12:13:10ZCyber Gen
<ul></ul><p>I beleive I have found a bug in the Redmine.pm file.</p>
<p>In sub access_handler if authentication fails then OK is always return even though no access is allowed to the project. It is somewhere in that region that the bug is located.</p> Redmine - Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)https://www.redmine.org/issues/16948?journal_id=655622015-08-21T09:17:22ZJonathan Tee
<ul></ul><p>same error with Redmine 3.1 :-(</p>
<p><a class="user active" href="https://www.redmine.org/users/95179">Gen Va</a>: AH01619: AuthUserFile not specified in the configuration<br />add<br /><pre>
AuthUserFile /dev/null
</pre></p> Redmine - Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)https://www.redmine.org/issues/16948?journal_id=674752015-11-24T13:52:40ZHolger Just
<ul><li><strong>File</strong> <a href="/attachments/14714">0001-Set-user-to-empty-string-in-Redmine.pm-for-anonymous.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/14714/0001-Set-user-to-empty-string-in-Redmine.pm-for-anonymous.patch">0001-Set-user-to-empty-string-in-Redmine.pm-for-anonymous.patch</a> added</li></ul><p>Using <a href="http://stackoverflow.com/a/29304195/421705" class="external">a StackOverflow answer</a>, we at <a href="https://plan.io/redmine-hosting" class="external">Planio</a> have developed and tested a patch for this issue against current trunk, which I attached here.</p>
<p>The basic idea is that we forcefully set the username to an empty string if we directly return with an OK. This results in Apache understanding that we have verified the empty username.</p> Redmine - Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)https://www.redmine.org/issues/16948?journal_id=674842015-11-24T20:57:51ZJean-Philippe Langjp_lang@yahoo.fr
<ul><li><strong>Subject</strong> changed from <i>broken anonymous repository access for public projects (redmine.pm)</i> to <i>Broken anonymous repository access for public projects (redmine.pm)</i></li><li><strong>Status</strong> changed from <i>New</i> to <i>Resolved</i></li><li><strong>Assignee</strong> set to <i>Jean-Philippe Lang</i></li><li><strong>Target version</strong> set to <i>3.1.3</i></li><li><strong>Resolution</strong> set to <i>Fixed</i></li></ul><p>Thanks, I'm committing the patch but I don't see any changes to Redmine.pm between 2.3 and 2.5.1 that could cause this error.</p>
<p>Tests for the perl module include a git clone on a public project without authentication (<a class="source" href="https://www.redmine.org/projects/redmine/repository/svn/entry/trunk/test/extra/redmine_pm/repository_git_test_pm.rb">source:trunk/test/extra/redmine_pm/repository_git_test_pm.rb</a>), and it passes. Maybe it's related to the Apache version, the tests run on Apache 2.2.</p> Redmine - Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)https://www.redmine.org/issues/16948?journal_id=674852015-11-24T21:01:04ZHolger Just
<ul></ul><p>On Apache 2.2, this change is not necessary. It only becomes an issue on Apache 2.4 where they rather deeply changed how authentication works.</p> Redmine - Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)https://www.redmine.org/issues/16948?journal_id=674872015-11-24T21:04:40ZJean-Philippe Langjp_lang@yahoo.fr
<ul><li><strong>Subject</strong> changed from <i>Broken anonymous repository access for public projects (redmine.pm)</i> to <i>Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)</i></li></ul><p>Thanks for the clarification.</p> Redmine - Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)https://www.redmine.org/issues/16948?journal_id=675672015-11-28T06:00:37ZJean-Philippe Langjp_lang@yahoo.fr
<ul><li><strong>Target version</strong> changed from <i>3.1.3</i> to <i>2.6.9</i></li></ul> Redmine - Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)https://www.redmine.org/issues/16948?journal_id=676472015-12-04T12:47:57ZJean-Philippe Langjp_lang@yahoo.fr
<ul><li><strong>Status</strong> changed from <i>Resolved</i> to <i>Closed</i></li></ul>