[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: How to configure Apache2+SVN+PAM

From: Nico Kadel-Garcia <nkadel_at_gmail.com>
Date: Mon, 31 Aug 2009 07:38:24 -0400

On Mon, Aug 31, 2009 at 2:26 AM, Andrey Repin<anrdaemon_at_freemail.ru> wrote:
> Greetings, Nico Kadel-Garcia!
>> On Mon, Aug 31, 2009 at 1:31 AM, Jason Malinowski<jason_at_jason-m.com> wrote:
>>>> Most of my acquaintances use TortoiseSVN (which is admittedly better
>>>> about this and has been for ages.)
>>> TortoiseSVN uses the same Crypto APIs as the command line packages. Thus, passwords aren't stored in plaintext.
>>> Jason Malinowski
>> Good. It's fixed in Windows. (Doesn't fix it in UNIX or Linux, but
>> that's a good step.)
> 3'rd message and you didn't bothered reading replies to your posts in a whole.
> Go back and read them please.

Are you referring to Ryan's? And his reference to the wallets? Those
ae out-of-band wrappers, and don't fix the underlying problem.

This is an old set of issues: storing the passwords in cleartext was a
bad idea from day one, and it's been band-aids and duct tape trying to
close the holes on it ever since.


To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-08-31 13:39:17 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.