Re: How to configure Apache2+SVN+PAM

On Mon, Aug 31, 2009 at 2:26 AM, Andrey Repin<anrdaemon_at_freemail.ru> wrote:
> Greetings, Nico Kadel-Garcia!
>
>> On Mon, Aug 31, 2009 at 1:31 AM, Jason Malinowski<jason_at_jason-m.com> wrote:
>>>> Most of my acquaintances use TortoiseSVN (which is admittedly better
>>>> about this and has been for ages.)
>>>
>>> TortoiseSVN uses the same Crypto APIs as the command line packages. Thus, passwords aren't stored in plaintext.
>>>
>>> Jason Malinowski
>
>> Good. It's fixed in Windows. (Doesn't fix it in UNIX or Linux, but
>> that's a good step.)
>
> 3'rd message and you didn't bothered reading replies to your posts in a whole.
> Go back and read them please.

Are you referring to Ryan's? And his reference to the wallets? Those
ae out-of-band wrappers, and don't fix the underlying problem.

This is an old set of issues: storing the passwords in cleartext was a
bad idea from day one, and it's been band-aids and duct tape trying to
close the holes on it ever since.

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2388861

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-08-31 13:39:17 CEST