Re: Setting the caching of passwords only localy

On Wed, Mar 23, 2011 at 11:04 AM, Stefan Sperling <stsp_at_elego.de> wrote:
> On Wed, Mar 23, 2011 at 02:47:46PM +0100, Cecil Westerhof wrote:
>> As I understand it the caching or not is done through setting:
>>     ${HOME}/.subversion/servers
>>
>> Is it possible to do this centrally?
>
> Put this in /etc/subversion/servers:
>
> [global]
> store-plaintext-passwords=no

I'm looking for documentation on this. I don't see it *anywhere*,
except a few comments in the source code for
libsvn_subr/config_file.c, not in the manual pages nor in the
"redbook".

Moreover, this only works on a single client host basis, it won't work
if the subversion is installed locally with a distinct "./configure
--sysconfdir=/etc" setting, it can be overridden in the individual
user's $HOME/.subversionn/servers file, etc., etc.

It's not a reliable approach. If you want to be sure of clients not
storing passwords with Subversion, you pretty much can't use password
based access techniques.
Received on 2011-03-23 17:06:03 CET