Re: svnserve authentication without passwd file

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Phillip!

Phillip Susi wrote:
> Because sshd invokes svnserv which causes it to not perform any
> authentication and use the $USER from the environment in commit
> messages. When you run svnserv in standalone mode, it is accepting
> remote connections, so it has to figure out who is connecting.

Thanks, this is what I wanted to know.

BTW, couldn't one abuse this, by setting the $USER variable and then
communicate with svnserve in tunnel mode?
Ah, no, because in doubt the svnserve process wouldn't have enough
rights on the repository files.

Now everything is clear! Thanks again!

Best regards,
Florian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEEKaQTSAdWevar50RAssuAKCxyiCKRMT9gDXYqmlO5kDDJ0mV8gCfSrHB
mK5GAoCRJfenIeIHpkKBFoo=
=VIU8
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Thu Mar 9 23:06:51 2006