The fix for CVE-2015-3184 (Subversion) and CVE-2015-3185 (httpd) broke the use of 3rd party modules such as mod_auth_kerb and mod_auth_ntlm when mandatory authn was combined with mod_authz_svn.  The problem was httpd returned a 401 response without an Authentication header meaning the client was unable to authenticate.  By returning DECLINED we allow the authn module to generate a 401 with the correct headers.
The fix for CVE-2015-3184 (Subversion) and CVE-2015-3185 (httpd) broke
the use of 3rd party modules such as mod_auth_kerb and mod_auth_ntlm
when mandatory authn was combined with mod_authz_svn.  The problem
was httpd returned a 401 response without an Authentication header
meaning the client was unable to authenticate.  By returning DECLINED
we allow the authn module to generate a 401 with the correct headers.

* subversion/mod_authz_svn/mod_authz_svn.c
  (access_checker): Return DECLINED rather than HTTP_UNAUTHORIZED.


git-svn-id: f8a4e5e023278da1e04e203c7fe051e3c4285d88@1708699 13f79535-47bb-0310-9956-ffa450edef68

YueLinHo/Subversion,YueLinHo/Subversion,YueLinHo/Subversion,YueLinHo/Subversion,YueLinHo/Subversion,YueLinHo/Subversion,YueLinHo/Subversion,YueLinHo/Subversion