Re: [fossil-users] ForceCommand SSH key with fossil?

2013-07-01 Thread Andy Bradford
Thus said Rene on Sun, 30 Jun 2013 16:07:44 +0200: It could be an alternative way. But the urlShell seems to be much easier! Thanks, I actually looked at urlShell, but it didn't seem right, or was confusing, or both. I've actually made some progress in getting the fossil client

Re: [fossil-users] ForceCommand SSH key with fossil?

2013-07-01 Thread Martin Gagnon
On Mon, Jul 01, 2013 at 12:42:11AM -0600, Andy Bradford wrote: Thus said Rene on Sun, 30 Jun 2013 16:07:44 +0200: It could be an alternative way. But the urlShell seems to be much easier! Thanks, I actually looked at urlShell, but it didn't seem right, or was confusing, or both.

Re: [fossil-users] ForceCommand SSH key with fossil?

2013-07-01 Thread Andy Bradford
Thus said Martin Gagnon on Mon, 01 Jul 2013 09:08:54 -0400: Have you try with server running more recent version ? I remember there was a patch somewhere between version 1.24 and 1.25 that was forcing full right when syncing using ssh://. I've tried with both 1.22 and 1.26. Here it

Re: [fossil-users] ForceCommand SSH key with fossil?

2013-07-01 Thread Matt Welland
Just FYI, removing the dependency on the shell for ssh access would be *very* much appreciated. Being able to fossil access without full shell access will be fantastic. On Mon, Jul 1, 2013 at 7:51 AM, Andy Bradford amb-fos...@bradfords.orgwrote: Thus said Martin Gagnon on Mon, 01 Jul 2013

Re: [fossil-users] ForceCommand SSH key with fossil?

2013-07-01 Thread Rene
If I have an account on the remote machine then autosync succeeds. I have this setup: archlinux running this is fossil version 1.25 [878f7008ab] 2013-05-31 17:41:25 UTC windows xp virtual machine arch fossil create andy.fsl fossil ui andy.fsl (add user zwart604 as developer) win

Re: [fossil-users] ForceCommand SSH key with fossil?

2013-07-01 Thread Stephan Beal
On Mon, Jul 1, 2013 at 9:16 PM, Rene renew...@xs4all.nl wrote: What seems weird if I drop the access of zwart604 to g(Clone) i can still sync and enter new files Is that expected behaviour? The i (Inbound/write/checkin) permission controls that. Are you able to bypass that permission check?

Re: [fossil-users] ForceCommand SSH key with fossil?

2013-07-01 Thread Rene
Yes, I dropt it from gjo to g. I now dropped of the g and my windows repo still sync succesful with the master repo. Where zwart604 now has no permissions at all see below the timeline the one at 20:49 is of zwart604 with no permissions on the master one. I probably do something wrong!

Re: [fossil-users] ForceCommand SSH key with fossil?

2013-07-01 Thread Stephan Beal
On Mon, Jul 1, 2013 at 10:57 PM, Rene renew...@xs4all.nl wrote: see below the timeline the one at 20:49 is of zwart604 with no permissions on the master one. I probably do something wrong! If i'm not mistaken (and i might be - i'm not familiar with the details of fossil's ssh bits), a user

Re: [fossil-users] ForceCommand SSH key with fossil?

2013-07-01 Thread Richard Hipp
On Mon, Jul 1, 2013 at 5:01 PM, Stephan Beal sgb...@googlemail.com wrote: On Mon, Jul 1, 2013 at 10:57 PM, Rene renew...@xs4all.nl wrote: see below the timeline the one at 20:49 is of zwart604 with no permissions on the master one. I probably do something wrong! If i'm not mistaken (and i

Re: [fossil-users] ForceCommand SSH key with fossil?

2013-07-01 Thread Rene
On 2013-07-01 23:01, Stephan Beal wrote: On Mon, Jul 1, 2013 at 10:57 PM, Rene renew...@xs4all.nl wrote: see below the timeline the one at 20:49 is of zwart604 with no permissions on the master one. I probably do something wrong! If i'm not mistaken (and i might be - i'm not familiar with

Re: [fossil-users] ForceCommand SSH key with fossil?

2013-07-01 Thread Andy Bradford
Thus said Richard Hipp on Mon, 01 Jul 2013 17:23:58 -0400: When you run the fossil http command, the user identified by each HTTP request is used. However, ssh does not run fossil http, it uses fossil test-http instead (unless Andy has changed that in his local copy). And fossil

Re: [fossil-users] ForceCommand SSH key with fossil?

2013-06-30 Thread Andy Bradford
Thus said Andy Bradford on 29 Jun 2013 20:34:07 -0600: So it seems to think that the server didn't respond, but it surely looks like it did. Will this approach even work? Ok, the problem was that the connection was closed (due to missing keep-alive, so SSH closed connection) in

Re: [fossil-users] ForceCommand SSH key with fossil?

2013-06-30 Thread Rene
On 2013-06-30 02:19, Andy Bradford wrote: Hello, Next hurdle. SSL or SSH on Windows. I just discovered that fossil.exe does not have SSL support, so that kind of presents a hurdle. By the way, it works nicely in a chroot with stunnel and SSL client certificates on an OpenBSD server.

Re: [fossil-users] ForceCommand SSH key with fossil?

2013-06-30 Thread Rene
On 2013-06-30 15:24, Rene wrote: [snip] Sorry this should have not been part of the message. It could be an alternative way. But the urlShell seems to be much easier! S Look in SSH_ORIGINAL_COMMAND. probably this is always /bin/sh or something like that. Maybe you can check on the ip number

[fossil-users] ForceCommand SSH key with fossil?

2013-06-29 Thread Andy Bradford
Hello, Next hurdle. SSL or SSH on Windows. I just discovered that fossil.exe does not have SSL support, so that kind of presents a hurdle. By the way, it works nicely in a chroot with stunnel and SSL client certificates on an OpenBSD server. So, now on to SSH... I'm trying to setup a

Re: [fossil-users] ForceCommand SSH key with fossil?

2013-06-29 Thread Andy Bradford
Thus said Andy Bradford on 29 Jun 2013 18:19:48 -0600: As can be seen, when my SSH key is used, it will be forced into fossil http mode, but the client crashes. I just found the following: http://www.mail-archive.com/fossil-users@lists.fossil-scm.org/msg02963.html I don't know what ever

Re: [fossil-users] ForceCommand SSH key with fossil?

2013-06-29 Thread Andy Bradford
Thus said Andy Bradford on 29 Jun 2013 18:19:48 -0600: Is there some trick I need to tell the client that it already has an open fossil http server waiting to be used on stdin/stdout and to just start talking HTTP? Ok, so I got impatient and cracked open the source. It looks like the