[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Wrong username for commits

From: Gili <junk_at_bbs.darktech.org>
Date: 2004-12-05 16:29:40 CET

        More to the point: what prevents me from logging in using SSH
as user1 and using "--tunnel-user user2"? Seems like a security risk...


--Original Message Text---
From: Gili
Date: Sun, 05 Dec 2004 10:28:04 -0500

That will likely work (thanks!) but I am wondering what is going on
under the hood. It was mentioned to me that I am getting user SYSTEM
because SSHd runs under this user but I find this odd because I use a
non-SYSTEM user ID in my ssh client. Isn't the ssh server supposed to
modify my session so it is associated with the specified user ID
instead of SYSTEM?


On Sun, 5 Dec 2004 08:31:28 -0600, Ben Collins-Sussman wrote:

>Try using the --tunnel-username switch with 'svnserve'.
>On Dec 5, 2004, at 8:23 AM, Gili wrote:
>> My original message is quoted below. Any ideas?
>> Thanks,
>> Gili
>> On Sat, 04 Dec 2004 19:16:56 +0100, SteveKing wrote:
>>> Gili wrote:
>>>> I'm using svn+ssh:// with the following ssh cmdline:
>>>> C:\Program Files\TortoiseSVN\bin\TortoisePlink.exe -i subversion.key
>>>> -l
>>>> username -pw password
>>>> but Subversion shows my commits as being done by user "SYSTEM".
>>>> The subversion.key has the following ssh-command associated with it:
>>>> command="/cygdrive/C/Program\Files/Subversion/bin/svnserve --tunnel
>>>> --root=/Program\
>>>> Files/Subversion",no-port-forwarding,no-X11-forwarding,no-agent-
>>>> forwardi
>>>> ng,no-pty ssh-rsa <key goes here>
>>> When you tunnel the svn connection over ssh, then the authentication
>>> is
>>> done by ssh alone. So Subversion never even sees your authentication
>>> data. That's why the user is always SYSTEM (the user ssh is running
>>> as).
>>> Check the Subversion mailing list - I remember that someone had a
>>> solution to that problem by using a special tool with ssh.
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
>> For additional commands, e-mail: users-help@subversion.tigris.org
Received on Sun Dec 5 16:32:30 2004

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.