Unfortunately even though I'm very interested I haven't had time to look
closely at this new ssh approach. Is the following use case possible to
implemen with your code? I ask because I hear some emphasis on the
many-to-one mapping and I'm interested in one-to-one mapping.

Each person given access registers their public key (maybe an administrator
checks them in to an admin fossil similar to how gitolite works) . Users do
not have a fossil password (but they are registered with the fossil). This
might use or be similar to the CGI REMOTE_USER variable workings.

Once I have my ssh key entered I should be able to do all operations
(clone, sync, commit etc.) without entering my password but the remote
fossil knows who I am.

Thanks.



On Mon, Aug 5, 2013 at 2:52 PM, Richard Hipp <[email protected]> wrote:

>
>
> On Mon, Aug 5, 2013 at 4:40 PM, Andy Bradford <[email protected]>wrote:
>
>> Thus said Richard Hipp on Mon, 05 Aug 2013 16:21:05 -0400:
>>
>> > I just  tried it,  and it  is different,  isn't it.  :-|. Let  me mess
>> > around some  and see if I  can live with the  change. Apparently, I'll
>> > need to get real familiar with --ssh-fossil-user....
>>
>> Yes, it's a  bit different becuase now Fossil  credentials are required.
>> Before, the file was just opened with localauth enabled.
>>
>> The default behavior is SSH User = Fossil User (credentials required).
>>
>> But  with the  --ssh-fossil-user it  is possible  to use  any number  of
>> Fossil users sharing the same SSH account (primarily through SSH keys).
>>
>> Addtionally, it  is now possible to  use SSH keys and  Force Commands to
>> restrict the SSH account to doing Fossil only activities.
>>
>>
>> One thing that I haven't done, but  might be necessary, is to change the
>> password prompt from:
>>
>> password for user:
>>
>> To:
>>
>> Fossil password for user:
>>
>
> Or maybe:  "Password for Fossil user $USER".  That would have saved me a
> lot of confusion.
>
>
>
>>
>> Or something  like that, just so  it is not ambiguous  which password is
>> being entered.
>>
>> Thanks for looking at it!
>>
>> Andy
>> --
>> TAI64 timestamp: 4000000052000dc3
>>
>
>
>
> --
> D. Richard Hipp
> [email protected]
>
> _______________________________________________
> fossil-users mailing list
> [email protected]
> http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
>
>


-- 
Matt
-=-
90% of the nations wealth is held by 2% of the people. Bummer to be in the
majority...
_______________________________________________
fossil-users mailing list
[email protected]
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users

Reply via email to