Re: Newbie question re: ssh
So, one of the pros of this approach is that it is more secure than the :pserver method, because the passwords are being transmitted over ssh? One of the cons is that the password will need to be entered frequently? Greg A. Woods [EMAIL PROTECTED] 11/16 2:20 PM [ On Friday, November 15, 2002 at 22:20:39 (-0800), Mike Ayers wrote: ] Subject: Re: Newbie question re: ssh Robert Koster wrote: I have set up a repository, and want to use :ext w/ SSH (without keys). Pros/cons? Con: this isn't possible. ssh operating without keys will forcibly invoke username/password login, which will gag the CVS client. Huh? I haven't tried without keys in a while but I'm pretty sure my client still just asks me for the password and lets me type it -- Greg A. Woods +1 416 218-0098;[EMAIL PROTECTED]; [EMAIL PROTECTED] Planix, Inc. [EMAIL PROTECTED]; VE3TCP; Secrets of the Weird [EMAIL PROTECTED] ___ Info-cvs mailing list [EMAIL PROTECTED] http://mail.gnu.org/mailman/listinfo/info-cvs ___ Info-cvs mailing list [EMAIL PROTECTED] http://mail.gnu.org/mailman/listinfo/info-cvs
Re: Newbie question re: ssh
No. You can set up the CVS server and the client side with passwordless access via RSH keys. It's in the SSH docs. That way you never have to enter a password after SSH is set up. ...Ken Robert Koster wrote: So, one of the pros of this approach is that it is more secure than the :pserver method, because the passwords are being transmitted over ssh? One of the cons is that the password will need to be entered frequently? Greg A. Woods [EMAIL PROTECTED] 11/16 2:20 PM [ On Friday, November 15, 2002 at 22:20:39 (-0800), Mike Ayers wrote: ] Subject: Re: Newbie question re: ssh Robert Koster wrote: I have set up a repository, and want to use :ext w/ SSH (without keys). Pros/cons? Con: this isn't possible. ssh operating without keys will forcibly invoke username/password login, which will gag the CVS client. Huh? I haven't tried without keys in a while but I'm pretty sure my client still just asks me for the password and lets me type it ___ Info-cvs mailing list [EMAIL PROTECTED] http://mail.gnu.org/mailman/listinfo/info-cvs
Re: Newbie question re: ssh
On Wed, 2002-11-20 at 00:25, Robert Koster wrote: I have set up a repository, and want to use :ext w/ SSH (without keys). Pros/cons? Con: this isn't possible. ssh operating without keys will forcibly invoke username/password login, which will gag the CVS client. Huh? I haven't tried without keys in a while but I'm pretty sure my client still just asks me for the password and lets me type it Apparently some of the graphic clients don't understand the password prompt. The command line client is fine, though. Jenn V. -- Do you ever wonder if there's a whole section of geek culture you miss out on by being a geek? - Dancer. [EMAIL PROTECTED] http://anthill.echidna.id.au/~jenn/ ___ Info-cvs mailing list [EMAIL PROTECTED] http://mail.gnu.org/mailman/listinfo/info-cvs
Re: Newbie question re: ssh
[ On Tuesday, November 19, 2002 at 08:25:45 (-0500), Robert Koster wrote: ] Subject: Re: Newbie question re: ssh So, one of the pros of this approach is that it is more secure than the :pserver method, because the passwords are being transmitted over ssh? The password encapsulation and obfuscation is really only a small part of the whole transport layer security issue. TCP is not secure (in any meaning of that word), at least not alone over plain old IPv4. Even the transport security is only a small part of the whole CVS security issue. CVS is not designed or implemented to be a security tool -- it's at the level of /bin/ed in security terms, not /bin/login. With CVSpserver there's lots of opportunity for one user to spoof another -- i.e. there's _NO_ accountability in pserver. One of the cons is that the password will need to be entered frequently? SSH can be configured to use any of many forms of authentication. There's no fundamental need to ever type passwords to it when it's used as a remote job execution facility for CVS. -- Greg A. Woods +1 416 218-0098;[EMAIL PROTECTED]; [EMAIL PROTECTED] Planix, Inc. [EMAIL PROTECTED]; VE3TCP; Secrets of the Weird [EMAIL PROTECTED] ___ Info-cvs mailing list [EMAIL PROTECTED] http://mail.gnu.org/mailman/listinfo/info-cvs
Re: Newbie question re: ssh
[ On Friday, November 15, 2002 at 22:20:39 (-0800), Mike Ayers wrote: ] Subject: Re: Newbie question re: ssh Robert Koster wrote: I have set up a repository, and want to use :ext w/ SSH (without keys). Pros/cons? Con: this isn't possible. ssh operating without keys will forcibly invoke username/password login, which will gag the CVS client. Huh? I haven't tried without keys in a while but I'm pretty sure my client still just asks me for the password and lets me type it -- Greg A. Woods +1 416 218-0098;[EMAIL PROTECTED]; [EMAIL PROTECTED] Planix, Inc. [EMAIL PROTECTED]; VE3TCP; Secrets of the Weird [EMAIL PROTECTED] ___ Info-cvs mailing list [EMAIL PROTECTED] http://mail.gnu.org/mailman/listinfo/info-cvs
Re: Newbie question re: ssh
Greg A. Woods wrote: [ On Friday, November 15, 2002 at 22:20:39 (-0800), Mike Ayers wrote: ] Subject: Re: Newbie question re: ssh Robert Koster wrote: I have set up a repository, and want to use :ext w/ SSH (without keys). Pros/cons? Con: this isn't possible. ssh operating without keys will forcibly invoke username/password login, which will gag the CVS client. Huh? I haven't tried without keys in a while but I'm pretty sure my client still just asks me for the password and lets me type it Hmmm. thinking back, that problem occurs on WinCVS. It may be that the command line client behaves correctly. I need to get my lab rebuilt and test these things first. /|/|ike ___ Info-cvs mailing list [EMAIL PROTECTED] http://mail.gnu.org/mailman/listinfo/info-cvs
Re: Newbie question re: ssh
Robert Koster wrote: I have set up a repository, and want to use :ext w/ SSH (without keys). Pros/cons? Con: this isn't possible. ssh operating without keys will forcibly invoke username/password login, which will gag the CVS client. /|/|ike ___ Info-cvs mailing list [EMAIL PROTECTED] http://mail.gnu.org/mailman/listinfo/info-cvs
Newbie question re: ssh
I am very new to cvs. I have set up a repository, and want to use :ext w/ SSH (without keys). Pros/cons? Also, is anybody using CVS in the Sun One Studio (formerly Forte for Java) IDE? Any special considerations, helpful hints, words of wisdom, etc.? Thanks, Bob ___ Info-cvs mailing list [EMAIL PROTECTED] http://mail.gnu.org/mailman/listinfo/info-cvs
