[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: svnserve SASL documentation?

From: Vlad Georgescu <vgeorgescu_at_gmail.com>
Date: 2007-04-10 22:49:42 CEST

On 4/10/07, Daniel Rall <dlr@collab.net> wrote:
> On Tue, 10 Apr 2007, David Anderson wrote:
>
> > On 4/10/07, Eric Gillespie <epg@pretzelnet.org> wrote:
> > >Can someone who worked on adding SASL support to svnserve update
> > >the man pages to explain how to use it? The comments in the
> > >svnserve.conf in a new repository are less than helpful:
> >
> > I didn't do anything with SASL other than follow the development, but
> > my understanding is that most of the actual configuration takes place
> > in /etc/sasl, where Cyrus SASL stores one config file per server with
> > SASL support. The values in svnserve.conf just specify "Yes, ask Cyrus
> > to handle SASL", and the min/max encryption values will act as a
> > filter to Cyrus SASL as it tries to decide what authentication
> > mechanism it should use, if it has a choice between several.
> >
> > For the rest, we need a sample /etc/sasl/subversion.conf. If my
> > explanation was correct, that is.
> ...
> > >[sasl]
> > >### This option specifies whether you want to use the Cyrus SASL
> > >### library for authentication. The default is false.
> > ># use-sasl = true
> > >### These options specify the desired strength of the security layer
> > >### that you want SASL to provide. 0 means no encryption, 1 means
> > >### integrity-checking only, values larger than 1 are correlated
> > >### to the effective key length for encryption (e.g. 128 means 128-bit
> > >### encryption). The values below are the defaults.
> > ># min-encryption = 0
> > ># max-encryption = 256
> ...
>
> I'd also be useful if the generated documentation noted whether Cyrus
> SASL is specific to ra_svn.

I'm not sure I understand. If you're referring to the comments in
svnserve.conf, I think it should be obvious that they're specific to
ra_svn simply by their presence in that file. (There's a comment at
the top of the default svnserve.conf telling people that the file is
specific to ra_svn).

-- 
Vlad
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Tue Apr 10 22:49:55 2007

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.