[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Wrong username for commits

From: Gili <junk_at_bbs.darktech.org>
Date: 2004-12-05 16:29:40 CET

        More to the point: what prevents me from logging in using SSH
as user1 and using "--tunnel-user user2"? Seems like a security risk...

Gili

--Original Message Text---
From: Gili
Date: Sun, 05 Dec 2004 10:28:04 -0500

That will likely work (thanks!) but I am wondering what is going on
under the hood. It was mentioned to me that I am getting user SYSTEM
because SSHd runs under this user but I find this odd because I use a
non-SYSTEM user ID in my ssh client. Isn't the ssh server supposed to
modify my session so it is associated with the specified user ID
instead of SYSTEM?

Thanks,
Gili

On Sun, 5 Dec 2004 08:31:28 -0600, Ben Collins-Sussman wrote:

>Try using the --tunnel-username switch with 'svnserve'.
>
>
>On Dec 5, 2004, at 8:23 AM, Gili wrote:
>
>>
>> My original message is quoted below. Any ideas?
>>
>> Thanks,
>> Gili
>>
>>
>> On Sat, 04 Dec 2004 19:16:56 +0100, SteveKing wrote:
>>
>>> Gili wrote:
>>>
>>>> I'm using svn+ssh:// with the following ssh cmdline:
>>>>
>>>> C:\Program Files\TortoiseSVN\bin\TortoisePlink.exe -i subversion.key
>>>> -l
>>>> username -pw password
>>>>
>>>> but Subversion shows my commits as being done by user "SYSTEM".
>>>> The subversion.key has the following ssh-command associated with it:
>>>>
>>>> command="/cygdrive/C/Program\Files/Subversion/bin/svnserve --tunnel
>>>> --root=/Program\
>>>> Files/Subversion",no-port-forwarding,no-X11-forwarding,no-agent-
>>>> forwardi
>>>> ng,no-pty ssh-rsa <key goes here>
>>>
>>> When you tunnel the svn connection over ssh, then the authentication
>>> is
>>> done by ssh alone. So Subversion never even sees your authentication
>>> data. That's why the user is always SYSTEM (the user ssh is running
>>> as).
>>> Check the Subversion mailing list - I remember that someone had a
>>> solution to that problem by using a special tool with ssh.
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
>> For additional commands, e-mail: users-help@subversion.tigris.org
>
>
Received on Sun Dec 5 16:32:30 2004

This is an archived mail posted to the Subversion Users mailing list.