[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: svn authentication

From: Ryan Schmidt <subversion-2006c_at_ryandesign.com>
Date: 2006-09-06 16:58:16 CEST

On Sep 1, 2006, at 23:10, Sheryl wrote:

>> First of all, now we're talking about something else. First, you were
>> talking about plain-text passwords stored in the svnserve password
>> file. This is solved by not using svnserve. Now, you're talking about
>> plain-text passwords stored in the client auth cache. This is
>> addressed by the following FAQ entry which explains your options:
>
> Actually, I wasn't talking about *anything* first because the posting
> your replied to was my first one in the thread, maybe the first one
> on the
> list. Thanks for the, um, warm welcome.

I beg your pardon; I'm so very sorry. I lost track of who the
original poster was.

>> Or
>> better yet, use svn+ssh to serve the repository, and use public and
>> private keys, so that no password ever needs to be stored anywhere.
>
> I was considering doing just that when I saw the posting about
> passwords
> in svnserve.conf and asked the question that got my head bitten
> off. For
> a moment I wondered if I had missed something and would put in the
> effort
> and just move my password problem from the clients to the servers.
>
> But to me, the more important question is -- how portable is the
> Mac OS
> keychain solution? Any chance that's going to find its way into
> the Linux
> code? The suggestion in the FAQ that someone spend time porting the
> half-baked rot13 obsfuscation to subversion is pretty useless, but if
> there's not some architectural impediment to porting the Mac OS
> keychain
> solution to Linux that could be worth spending some time on.

Does Linux have an OS-level feature comparable to the Mac OS X
Keychain? If so, then presumably Subversion could use that on Linux.
I don't expect that the Mac OS X Keychain code could be reused,
though, since that would be specific to the Mac OS X Keychain APIs.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Sep 6 17:20:54 2006

This is an archived mail posted to the Subversion Users mailing list.