Re: Password Cache for Active Session

On 24.12.2009 07:33, Ryan J Ollos wrote:
> christopher.reynard wrote:
>>
>> We are required to have users authenticate but this information must not
>> be 'permanently' cached. Having to continuously enter user/pass
>> credentials just isnt really practical but entering them once at the
>> beginning of a session would be fine. Just wondering if you or anyone else
>> discovered a solution for this.
>>
>
> I have the same issue as well using SVN with mod_dav_svn. We have several
> development systems in a lab where a users tests their code on the hardware
> (each machine has a single shared OS account). Users frequently use TSVN
> and so get prompted for their username / password frequently.
>
> We can't cache authentication data for those users because users would
> inevitably frequently forget to clear their authentication data before
> leaving the machine. I'm not too concerned about the security risk because
> its a secure building, but the log info for a checkin must be associated
> with the users performing the checkin. If we allowed authentication data to
> be cached, then inevitably users would end up performing checkins to the
> repository under a cached username that is not their own.
>
> Ideally I would like to be able to:
> * Specify the interval for which a username / password get cached (e.g. 30
> minutes).

Would require a change in the svn library. Can't be done in TSVN directly.

> * Have this info cleared when a user logs out.

http://tortoisesvn.net/docs/nightly/TortoiseSVN_en/tsvn-dug.html#tsvn-dug-general-auth

"Some people like to have the authentication data deleted when they log
off Windows, or on shutdown. The way to do that is to use a shutdown
script to delete the %APPDATA%\Subversion\auth directory, e.g.

@echo off
rmdir /s /q "%APPDATA%\Subversion\auth"

You can find a description of how to install such scripts at
windows-help-central.com ."

Stefan

-- 
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest Interface to (Sub)Version Control
    /_/   \_\     http://tortoisesvn.net
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2432837
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].