[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Subclipse 0.9.33 Released

From: Russel Winder <russel_at_russel.org.uk>
Date: 2005-09-14 08:26:11 CEST

On Tue, 2005-09-13 at 13:50 -0400, Roberto C. Sanchez wrote:

> ~/.subversion/auth/svn.ssh, causing later attempts without me directly
> entering the passphrase appear to succeed. In fact, it had been using

Case solved.

I had done a grep -r for username and passphrase strings on all the
Eclipse related stores (and found a ~/.eclipse directory that needed
deleting as well). What I had failed to do was recheck ~/.subversion
(which I generally delete from time to time). Lo and behold:

512 elon:~/.subversion/auth
|> tree
|-- svn.simple
|-- svn.ssh
| |-- 322e0839a7eec89f6cfbde926de9e045
| `-- 798bbf8d4a3c08d2ea65f0f6141699b3
|-- svn.ssl.server
`-- svn.username

one of these is 3 months old the other 3 days, both contain username and
passphrase data in plain text and they contain the location of the key

So clearly these files must be being consulted for the passphrase. So
why aren't they consulted for the key file? Clearly they used to be but
now they are not. Presumably this ~/.subversion directory is managed by
Subclipse not by Subversion.

I also assume that if I delete them then I will have to give all
parameters to the eclipse command which is sort of OK for me but, as
Roberto said earlier, on a multi-use machine histories then contain the
plain passphrase so it is much better for Subclipse to enter into a
dialogue to get username and passphrase.

I also think that these files should not be created or if they must the
passphrase needs encoding and it would be good if the files got deleted
at the end of the session to which they relate.

Phew. Glad I understand that one. Sorry I led people up the garden

Dr Russel Winder                +44 20 7585 2200
41 Buckmaster Road              +44 7770 465 077
London SW11 1EN, UK             russel@russel.org.uk

Received on Wed Sep 14 16:26:11 2005

This is an archived mail posted to the Subclipse Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.