[ILUG] repost with more info ...CVS permissions question

[Padraig Brady]

David Neary wrote:
> kevin lyda wrote:
> 
>>On Mon, Sep 30, 2002 at 05:37:55PM +0100, Justin MacCarthy wrote:
>>
>>>service cvspserver
>>
>>also, you should really use ssh for cvs, not pserver.  pserver sends
>>passwords practically in cleartext and stores the password on the client
>>practically in cleartext.
> 
> Would you mind going over how you'd do that? I only know of
> setting CVS_RSH to ssh, which introduces the problem of giving a
> password every time you do a cvs operation, and the inability to
> use the cvs passwd file.

If your local username is different from that on the remote
(cvs) server then the following is very useful in ~/.ssh/config

   Host remote_server
   user remote_server_username

Now you need to generate the key pair that ssh
uses to authenticate and encrypt traffic between
you and remote_server.

   ssh-keygen -t dsa

remote_server needs the public half of the key, so...

   scp ~/.ssh/id_dsa.pub remote_server:.ssh/authorized_keys2

Now you can ssh/scp/sanything to remote_server without
needing a password. To get CVS to use ssh you do:

   export CVS_RSH=ssh
   export CVSROOT="remote_server:/path/to/repository"

Padraig.