[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Password Cache for Active Session

From: Stefan Küng <tortoisesvn_at_gmail.com>
Date: Thu, 24 Dec 2009 11:42:40 +0100

On 24.12.2009 07:33, Ryan J Ollos wrote:
> christopher.reynard wrote:
>> We are required to have users authenticate but this information must not
>> be 'permanently' cached. Having to continuously enter user/pass
>> credentials just isnt really practical but entering them once at the
>> beginning of a session would be fine. Just wondering if you or anyone else
>> discovered a solution for this.
> I have the same issue as well using SVN with mod_dav_svn. We have several
> development systems in a lab where a users tests their code on the hardware
> (each machine has a single shared OS account). Users frequently use TSVN
> and so get prompted for their username / password frequently.
> We can't cache authentication data for those users because users would
> inevitably frequently forget to clear their authentication data before
> leaving the machine. I'm not too concerned about the security risk because
> its a secure building, but the log info for a checkin must be associated
> with the users performing the checkin. If we allowed authentication data to
> be cached, then inevitably users would end up performing checkins to the
> repository under a cached username that is not their own.
> Ideally I would like to be able to:
> * Specify the interval for which a username / password get cached (e.g. 30
> minutes).

Would require a change in the svn library. Can't be done in TSVN directly.

> * Have this info cleared when a user logs out.


"Some people like to have the authentication data deleted when they log
off Windows, or on shutdown. The way to do that is to use a shutdown
script to delete the %APPDATA%\Subversion\auth directory, e.g.

@echo off
rmdir /s /q "%APPDATA%\Subversion\auth"

You can find a description of how to install such scripts at
windows-help-central.com ."


   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest Interface to (Sub)Version Control
    /_/   \_\     http://tortoisesvn.net
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2009-12-24 11:42:52 CET

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.