[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Options for how ra_svn client authenticates

From: Glenn A. Thompson <gthompson_at_cdr.net>
Date: 2003-10-17 09:40:25 CEST

Hey

Greg Hudson wrote:

>On Fri, 2003-10-17 at 01:28, Glenn A. Thompson wrote:
>
>
>>Could you elaborate on this. I don't like the idea of a password
>>database being in the repository.
>>
>>
>
>Why?
>
Because people may want to authenticate against an in-house database.
Also, I was wondering if you were proposing making it a formal part of
the FS_API or just planning to put it in the repos file structure somewhere.

>
>
>
>>I read through the IRC text. I think I understand the Apache
>>limitation. However, I'm not in the habit of inviting a stranger into my
>>house and then asking his name when I discover he's a thief.
>>
>>
>
>What you do is your business; however, the Subversion project does
>exactly this: it lets people in unless they want to do a commit or
>rev-prop-change, and then asks them for a password.
>
Whoops! good point:-)
I *did* mean within a commit or prop-change. That was a very bad
analogy. And a poor attempt at humor.
I've always provided my credentials up front for commits etc. So I
don't ever recall being prompted in the middle of a commit.
I figured the client would just abort when challenged if I didn't
provide them up front.
After considering the possibility other DAV clients, I realized I'm
totally off base regardless. Sorry.

But of course for ra_svn you have a choice.
My choice would be (1).

>
>
>
>>> VARIATION: We could add a --anonymous client flag
>>>
>>>
>
>
>
>>Please don't:-)
>>
>>
>
>Why?
>
>
What I was thinking was: "Yet another flag. How is it different than
specifying anonymous as my userid?"
Had I groked your Note about --anonymous and ra_dav my comments would
have been limited to the password database question.
However does --non-interactive come into play here?

Having reviewed your email again and my response. I have concluded that
all the code I write tonight will just plain suck.
So the allnighter I had planned has been terminated.
Good night.

gat

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Fri Oct 17 09:46:05 2003

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.