Re: svnserve daemon mode + SSH

On 11 Feb 2012 18:27:12 -0800, André Hänsel wrote:
>
> Hi list,
>
> can I use svnserve in daemon mode (to take advantage of its authorization
> mechanisms) and still have the client use an SSH tunnel (probably with
> different credentials) to connect to it, so I only have to expose the SSH
> port?
>
> I found a post at http://svn.haxx.se/users/archive-2004-12/1413.shtml
> talking about something called "SVN over SSH" but it's not mentioning how to
> set it up.
>
> Regards,
> André

As Nico has already mentioned, the svn+ssh access mode can be found
the Red Bean book, "Tunneling over SSH", and specifics may be found
here:

http://svnbook.red-bean.com/en/1.7/svn.serverconfig.svnserve.html#svn.serverconfig.svnserve.sshtricks

The basic idea is that you multiplex all access to the repository
through one account, with a special keypair for each user.

In the 'svnuser' account's ~/.ssh/authorized_keys file, a user's
public key is used to adjust svnserve's --tunnel-user option, to sign
each change with the correct ID.

Ted

-- 
 Frango ut patefaciam -- I break so that I may reveal