Re: [ILUG] repost with more info ...CVS permissions question

From: Padraig Brady (padraig.brady at domain corvil.com)
Date: Tue 01 Oct 2002 - 09:44:02 IST


David Neary wrote:
> kevin lyda wrote:
>
>>On Mon, Sep 30, 2002 at 05:37:55PM +0100, Justin MacCarthy wrote:
>>
>>>service cvspserver
>>
>>also, you should really use ssh for cvs, not pserver. pserver sends
>>passwords practically in cleartext and stores the password on the client
>>practically in cleartext.
>
> Would you mind going over how you'd do that? I only know of
> setting CVS_RSH to ssh, which introduces the problem of giving a
> password every time you do a cvs operation, and the inability to
> use the cvs passwd file.

If your local username is different from that on the remote
(cvs) server then the following is very useful in ~/.ssh/config

   Host remote_server
   user remote_server_username

Now you need to generate the key pair that ssh
uses to authenticate and encrypt traffic between
you and remote_server.

   ssh-keygen -t dsa

remote_server needs the public half of the key, so...

   scp ~/.ssh/id_dsa.pub remote_server:.ssh/authorized_keys2

Now you can ssh/scp/sanything to remote_server without
needing a password. To get CVS to use ssh you do:

   export CVS_RSH=ssh
   export CVSROOT="remote_server:/path/to/repository"

Padraig.



This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:19:10 GMT