[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Repository Passwords are in clear text?

From: Damir Shayhutdinov <damir_at_tecon.ru>
Date: 2005-11-16 09:23:30 CET

On Fri, Nov 11, 2005 at 11:01:58AM +0100, Maurizio de Pascale wrote:
> Hi everybody,
> I'm just setting up a svn repository to be used from the internet and
> noticed that the /conf/passwd file contains passwords in clear text!
> This is very bad as it forces people to choose a password knowing that
> other guys could eventually read it.
> Is there a way to change this behavior and force "CVS-like" storing of
> passwords?
I suppose the most secure way is to use svn over SSH, with public key
authentiĶation, and ssh-agent for storing passwords for private keys on
client side. Or, in Windows, plink and pageant programs from PuTTY
package can be used as transport and secure authentication.

Damir Shayhutdinov
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Nov 16 09:25:03 2005

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.