[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: [PATCH] Obfuscate auth info

From: Martin Furter <mf_at_rola.ch>
Date: 2006-10-20 19:40:36 CEST

I guess no distro would package svn with GNOME keyring enabled because it
would pull in all the dependencies, all the GNOME libs, and users of other
WM's often do not want that.

So the solution would be a DSO which gets loaded. But as soon as other
keyrings are supported too how will svn detect which plugin to load?
How far do you want to go?

I propose a config entry to enable obfuscating passwords, and default for
it to be turned off. That way both sides have what they want: Those who
say obfuscating is worse still have the default behaviour. And those who
want to enable obfuscation can do it. And both of them get a nice warning
in the config file.

Just my 2 cents.

Martin

On Fri, 20 Oct 2006, David Anderson wrote:

> I have investigates (well, actually, implemented) GNOME Keyring
> support for Subversion. It is highly desktop specific, in that only
> Gnome starts the gnome keyring daemon, and as far as I can tell, it
> will always want to pop up a master password prompt, which has the
> same issues as OSX Keychain when using svn over a remote connection to
> a machine.
>
> I still have issues with getting the build system to integrate
> detection/activation of gnome keyring, but hopefully I can have the
> whole thing properly tested and committed soon.
>
> - Dave
>
> On 10/20/06, Peter Lundblad <plundblad@google.com> wrote:
>> David Anderson writes:
>> > On 10/19/06, Angel Marin <anmar@gmx.net> wrote:
>> > > What about interfacing with GNOME Keyring[1] when available? It's there
>> > > just for this purpose and it gives a fairly flexible way of managing
>> > > stored passwords.
>> > >
>> > > [1] http://en.wikipedia.org/wiki/GNOME_Keyring
>> >
>> > This is a potential solution for linux operating systems. I am busy
>> > right now, but implementing this would be an interesting complement
>> > (not replacement - not all systems subversion supports have a gnome
>> > desktop) to the obfuscation patch. The option to support the similar
>> > facility in KDE would also be nice.
>> >
>>
>> I also like the spirit of this solution much better than obfuscation.
>> I don't know the state of gnome-keyring and I would hope for a non-desktop
>> environment specific solution. Something more sophisticated than
>> obfuscation
>> seems to be system dependent anyway and we already have something similar
>> on Windows and Mac, so +0 from me.
>>
>> Thanks,
>> //Peter
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: dev-help@subversion.tigris.org
>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Fri Oct 20 19:40:57 2006

This is an archived mail posted to the Subversion Dev mailing list.