(no subject)

[root]

>From address@hidden  Tue Feb  6 08:55:56 2001
>Return-Path: <address@hidden>
Received: from fencepost.gnu.org (fencepost.gnu.org [199.232.76.164])
        by gateway.camelot.jp (8.9.3/8.9.3/Debian 8.9.3-21) with ESMTP id 
IAA16979
        for <address@hidden>; Tue, 6 Feb 2001 08:55:54 +0900
Received: from localhost ([127.0.0.1] helo=fencepost.gnu.org)
        by fencepost.gnu.org with esmtp (Exim 3.16 #1 (Debian))
        id 14PvST-0007Ig-00; Mon, 05 Feb 2001 18:54:09 -0500
Received: from phoenix.nanospace.com ([209.213.199.19])
        by fencepost.gnu.org with smtp (Exim 3.16 #1 (Debian))
        id 14PvRN-0007I4-00
        for <address@hidden>; Mon, 05 Feb 2001 18:53:01 -0500
Received: (qmail 2142 invoked from network); 5 Feb 2001 23:52:56 -0000
Received: from workstation-209-213-222-98.yy.com (HELO thune.mrc-home.org) 
(209.213.222.98)
  by phoenix.nanospace.com with SMTP; 5 Feb 2001 23:52:56 -0000
Received: by thune.mrc-home.org (8.10.0) id f15NqtC17047; Mon, 5 Feb 2001 
15:52:55 -0800
From: Mike Castle <address@hidden>
To: address@hidden
Subject: Re: Secure remote CVS
Message-ID: <address@hidden>
Reply-To: Mike Castle <address@hidden>
Mail-Followup-To: Mike Castle <address@hidden>, address@hidden
References: <address@hidden>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
User-Agent: Mutt/1.3.6i
In-Reply-To: <address@hidden>; from address@hidden on Mon, Feb 05, 2001 at 
05:05:51PM -0600
Sender: address@hidden
Errors-To: address@hidden
X-BeenThere: address@hidden
X-Mailman-Version: 2.0
Precedence: bulk
List-Help: <mailto:address@hidden>
List-Post: <mailto:address@hidden>
List-Subscribe: <http://mail.gnu.org/mailman/listinfo/info-cvs>,
        <mailto:address@hidden>
List-Id: Announcements and discussions for the CVS version control system 
<info-cvs.gnu.org>
List-Unsubscribe: <http://mail.gnu.org/mailman/listinfo/info-cvs>,
        <mailto:address@hidden>
List-Archive: <http://mail.gnu.org/pipermail/info-cvs/>
Date: Mon, 5 Feb 2001 15:52:55 -0800
Status: O
Content-Length: 1746
Lines: 41

On Mon, Feb 05, 2001 at 05:05:51PM -0600, David H. Thornley wrote:
> I recommended setting CVS_RSH=ssh, and was told that the users
> then had to type in their password for every file being transferred,
> and that is more typing than they're willing to put up with.

What implementation of ssh are they using?

I was using a port of 1.2.14 to win32 and did the following:

Set up HOME environment variables for everyone, and create %HOME%/.ssh
directories for all involved.  (also handy place to put .cvsrc and
.cvsignore files too).

On all of the clients, run ssh-keygen and supply NO passphrase (It turns
out the particular port that I used was broken in this aspect.  So I had
to run ssh-keygen on the unix box and ftp files back.  It was a pain,
but worked.  Apparently there is a work around for this particular port,
but I forget what it is).

Then we did the appropriate things with public/private key files onto the
server (been a while since set it up so don't remember details).

Now, problem with this is that any access to this machine/account now
allows access to the cvs server without another need for a password.  Is
that sufficient or not?

If using a Cygwin port, can you do things with ssh-agent to have it up and
running?  I've never used ssh-agent so don't know if it would serve this
purpose or not.

mrc
-- 
       Mike Castle       Life is like a clock:  You can work constantly
  address@hidden  and be right all the time, or not work at all
www.netcom.com/~dalgoda/ and be right at least twice a day.  -- mrc
    We are all of us living in the shadow of Manhattan.  -- Watchmen

_______________________________________________
Info-cvs mailing list
address@hidden
http://mail.gnu.org/mailman/listinfo/info-cvs