[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Why is svn not saving my password in Pi-OS?

From: Nathan Hartman <hartman.nathan_at_gmail.com>
Date: Tue, 29 Dec 2020 00:47:32 -0500

On Mon, Dec 28, 2020 at 3:16 PM Bo Berglund <bo.berglund_at_gmail.com> wrote:

> On Sun, 20 Dec 2020 11:59:11 +0100, Bo Berglund
> >5) Then the commit worked!
> >
> >So it seems like the svn config file must be modified and then it
> >starts working again.
> >
>
> Except now it has reverted to popping up the GUI login dialog when I
> am checking in via a PuTTY session.
> In PuTTY it just sits there doing nothing, if I then open the VNC
> window into the RPi then I see the login dialog there. :(
>
> How should the setting in subversions config file look like?
> Right now it is as follows (uncommented the existing line)
>
> password-stores = gpg-agent,gnome-keyring,kwallet
>
> Should something be taken out or something else added to make it stop
> this behaviour and always demand login on the terminal that issues the
> svn operation?
>
> It seems so strange that svn would use a completely different window
> to get the credentials from than the one where svn itself runs.

Hi Bo,

The order of the 'password-stores' setting is significant. Based on what
you wrote the last time, that means gpg-agent is tried first, followed by
gnome-keyring, followed by kwallet.

It sounds to me like one of these is putting up the GUI password dialog
that you want to avoid.

It is probably enough to choose just one of these password caches and set
it up properly, to ensure that you'll only use that one.

Here is some information about getting gpg-agent and gnome-keyring to
prompt for password in the console, not in the GUI. I'm also including a
link about KWallet, though that one doesn't look as encouraging to me as
the other two... you might want to remove that one from password-stores
(and you might want to remove one of the other two, leaving just one).

gpg-agent
=========

To get gpg-agent to prompt for password in the console, see the following
two questions and answers:

https://superuser.com/questions/520980/how-to-force-gpg-to-use-console-mode-pinentry-to-prompt-for-passwords

https://stackoverflow.com/questions/17769831/how-to-make-gpg-prompt-for-passphrase-on-cli

Namely, these explain how to setup gpg-agent to use a console-based
pinentry program, either pinentry-tty or pinentry-curses.

gnome-keyring
=============

Regarding gnome-keyring, see this question:

https://superuser.com/questions/141036/use-of-gnome-keyring-daemon-without-x

and in particular see Stephen Gray's answer (currently the 2nd from the
top). It includes a link to "source material" which is a WANdisco article
but that link is broken; the updated link is:

https://community.wandisco.com/s/article/How-to-set-up-encrypted-svn-password-storage-using-gnome-keyring-in-an-ssh-session

In particular, see the part about setting up a dbus session to interface
with the GNOME Keyring; I think that's the key step that allows it to work
without X (without a GUI).

kwallet
=======

Less encouraging than the other two, but:

https://bbs.archlinux.org/viewtopic.php?id=253391

Hope one of these helps...
Nathan
Received on 2020-12-29 06:48:00 CET

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.