RE: RE: Query on SVN+SSH

Me being a linux newbie, this is probably not going to work, but how about setting the default users shell to /bin/false or /sbin/nologin and then having the ssh'd users pick that up?

Rgds

Staffan Tj.

Staffan Tjernström | Sr. Software Engineer - Market Data Systems | www.esignal.com
eSignal, Interactive Data Corporation Desktop Solutions (NYSE: IDC)
3955 Point Eden Way | Hayward, CA 94545-3720 | 510.723.1723 | FAX: 510.266.6100

-----Original Message-----
From: Jason Winnebeck [mailto:jpwasp@rit.edu]
Sent: Thursday, 12 July, 2007 10:00
To: Sahadeo Raskonda
Cc: users@subversion.tigris.org
Subject: RE: Query on SVN+SSH

It appears to me that the link you have sent will work if your SSH server supports that (it should since you are using RHEL). I didn't know you could put these options in the authorized_keys file.

Jason

________________________________________
From: Sahadeo Raskonda [mailto:snraskonda@gmail.com]
Sent: Thursday, July 12, 2007 10:53 AM
To: Jason Winnebeck
Subject: Re: Query on SVN+SSH

Thanks a Million Jason...
Further I was exploring http://svn.collab.net/repos/svn/trunk/notes/ssh-tricks
But this doesnot work fine...any ideas on this ??#
Thanks,
Saha

 
On 7/12/07, Jason Winnebeck <jpwasp@rit.edu> wrote:
The disadvantage for SVN+SSH access is that the users need to have shell accounts. It might be possible to have some login shell jiggery to make it so they can't log in, but if you really want to have control you need to use a server. If you are concerned about security, HTTPS over Apache is your best bet, otherwise SVN protocol can work to prevent the need for shell accounts, but is not secure.

Jason Winnebeck

________________________________________
From: Sahadeo Raskonda [mailto:snraskonda@gmail.com]
Sent: Thursday, July 12, 2007 9:57 AM
To: users@subversion.tigris.org
Subject: Query on SVN+SSH

Dear Folks,

Can anyone please help me on this ??

I have installed SVN-1.4 on RHEL4 Box by RPM's
Further configured SVN+SSH access by
1) Creating System users on the Box.
2) Wrapper script to embed svnserve
Like all steps in http://svn.haxx.se/dev/archive-2004-03/0253.shtml
and it works fine....

But problem is users can logon onto Box and delete entire REPO !!!

Further I was exploring http://svn.collab.net/repos/svn/trunk/notes/ssh-tricks
But this doesnot work fine...

Any ideas on How to configure svn+ssh which uses system users and no shell access to these users ??

Thanks in Advance for your help,
Regards,
Saha

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

DISCLAIMER: This message (including any files transmitted with it) may contain confidential and / or proprietary information, is the property of Interactive Data Corporation and / or its subsidiaries and is directed only to the addressee(s). If you are not the designated recipient or have reason to believe you received this message in error, please delete this message from your system and notify the sender immediately. An unintended recipient's disclosure, copying, distribution or use of this message, or any attachments, is prohibited and may be unlawful.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Thu Jul 12 17:32:42 2007