It's only men't to be a replacement for the /etc/passwd and 
/etc/shadow support that is alredy suported by cvs.
 The security level is the same as with /etc/passwd

the patch is usefull if one want to support password through pam 
amd ldap and is in a private network. 
 
> > Patch to support pam password 
> > not so nice done but it's the same way netatalk and samba do it
> 
> This is a bad idea.
> 
> Security (including all authentication *and* any connection
> authorisation) belongs only outside of CVS.  CVS already supports SSH
> (and RSH), and could easily support SSL and SRP, and maybe SASL too, in
> the same way.  Please consider using those existing mechanisms.
> 
> -- 
>                                                       Greg A. Woods
> 
> +1 416 218-0098      VE3TCP      <[EMAIL PROTECTED]>      <robohack!woods>
> Planix, Inc. <[EMAIL PROTECTED]>; Secrets of the Weird <[EMAIL PROTECTED]>
> 


Reply via email to