[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: [TSVN] Re: TortoiseSVN 1.1.0 RC1 released

From: SteveKing <steveking_at_gmx.ch>
Date: 2004-08-13 13:09:16 CEST

Jens Scheidtmann wrote:

> I thought that the svn library (which tsvn uses) stores the
> passwords there for all svn clients? I.e. if you switch it off, all
> other clients will not store authentication data any more.

TSVN doesn't use the svn library anymore for storing authentication.
Because the svn library does _not_ encrypt it, but TSVN now does.

> IMHO inconvenient.

Tell that the subversion people. Many times people asked for encrypting
the auth data which was refused every time. Sure, there's no platform
independent way to do that, and it's not available for all platforms
either...

> BTW what happens, if I first access a repository using the command line
> client and then e.g. commit from my WC using TSVN? Will the passwords
> be translated, do they remain stored in cleartext or do I have to
> provide them again?

If the auth data is already stored by another subversion client, TSVN
will use that. If it is not, then TSVN will store it encrypted. But that
means that other Subversion clients can't use that stored auth data.
So if you then use another Subversion client and you store the auth data
again, you will have the auth data stored again in cleartext.

The reason for preventing other Subversion clients from storing the auth
data is simple: if you don't, you'll end up with the auth data stored in
cleartext again, and the whole encrypting TSVN does is useless.

Stefan

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: dev-help@tortoisesvn.tigris.org
Received on Fri Aug 13 14:19:15 2004

This is an archived mail posted to the TortoiseSVN Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.