[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Repository Passwords are in clear text?

From: Damir Shayhutdinov <damir_at_tecon.ru>
Date: 2005-11-16 09:23:30 CET

On Fri, Nov 11, 2005 at 11:01:58AM +0100, Maurizio de Pascale wrote:
> Hi everybody,
> I'm just setting up a svn repository to be used from the internet and
> noticed that the /conf/passwd file contains passwords in clear text!
> This is very bad as it forces people to choose a password knowing that
> other guys could eventually read it.
> Is there a way to change this behavior and force "CVS-like" storing of
> passwords?
I suppose the most secure way is to use svn over SSH, with public key
authentiĶation, and ssh-agent for storing passwords for private keys on
client side. Or, in Windows, plink and pageant programs from PuTTY
package can be used as transport and secure authentication.

-- 
WBR,
Damir Shayhutdinov
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Nov 16 09:25:03 2005

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.