Re: ssh based access?

"Perry E. Metzger" wrote:
>
> I've been lurking for quite some time, following subversion
> development with interest. One issue that is big for the folks over in
> NetBSD (my open source project poison of choice) is secure access to
> the source repository. Currently, we do all our access to our CVS
> repository via ssh, and people are very happy with ssh as a transport
> mechanism. There is probably a lot of resistance to opening up other
> holes on the main source repository.
>
> I realize that extracting Apache and such from the process would be
> very hard, but would it be difficult to make the standard tools able
> to operate through port forwarded ssh connections the way that CVS
> happily operates via CVS_RSH=ssh based connections?

Well, Subversion does support SSL through Apache's support of SSL.

But you could use SSH as well. Say you have an Apache 2.0/Svn server
running on port 8888 on svn.repository.org and you do not have root
access on your local machine. You would set up a SSH tunnel doing
something like:

ssh -L20123:localhost:888 username@svn.repository.org sleep 100000000

And then access svn through the URL

http://localhost:20123/

The -L sets up an SSH port forward.

You need some command on the remote system to keep ssh the ssh connection
alive, hence the sleep.

Best,
Blair

-- 
Blair Zajac <blair@orcaware.com>
Web and OS performance plots - http://www.orcaware.com/orca/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org