[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: storing user passwords in non-cleartext form in password-db file

From: Jeroen Leenarts <leenarts-jeroen_at_tiscali.nl>
Date: 2004-10-25 17:12:24 CEST

I believe that's something that has to be arranges within the specific
users ssh client. I recall somethin about a some agent command line tool
for Putty to cache credentials in memory on the client side.

It is something that has to be configured on the client's ssh
implementation.

Jeroen

W J wrote:

>Thanks for the reply, I have a follow-up question:
>
>Assume the developer used svn+ssh:// to check out
>sources.
>When she wants to commit the changes, will she have to
>use the "--username" argument, or does svn remember
>that the checkout was done remotely, and use the cache
>/ prompt her for a password (allowing her to omit the
>annoying --username argument)?
>
>Thanks,
>WJ
>
>--- Max Bowsher <maxb@ukf.net> wrote:
>
>
>
>>W J wrote:
>>
>>
>>>Hi,
>>>Is there a way to store the passwords configured
>>>
>>>
>>in
>>
>>
>>>the password file (pointed to by password-db) in
>>>non-cleartext form?
>>>I realize that obscurity is not security, but in
>>>
>>>
>>my
>>
>>
>>>case, our development is based on trust, so I am
>>>
>>>
>>not
>>
>>
>>>worried about security at all. We need some way of
>>>authenticating users (to know who made each change
>>>
>>>
>>to
>>
>>
>>>the sources), and I want to avoid seeing the other
>>>users' password in plaintext.
>>>
>>>
>>This is not currently possible with plain svn://
>>access.
>>
>>Yes, it probably ought to be.
>>
>>For now, the available workarounds are:
>>
>> Use svn+ssh://
>> Use http[s]://
>>
>>Max.
>>
>>
>>
>>
>
>
>
>
>_______________________________
>Do you Yahoo!?
>Declare Yourself - Register online to vote today!
>http://vote.yahoo.com
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
>For additional commands, e-mail: users-help@subversion.tigris.org
>
>
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Mon Oct 25 17:18:12 2004

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.