info-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: remote cvs access - recommendations


From: Larry Jones
Subject: Re: remote cvs access - recommendations
Date: Tue, 7 Oct 2003 12:28:08 -0400 (EDT)

address@hidden writes:
> 
> on a related issue, i setup a pserver and was horrified to discover that
> when i issued a "cvs login", it was ignoring $CVSROOT/CVSROOT/passwd and
> instead was authenticating using /etc/shadow.  i inadvertantly sent a
> plaintext password over the internet!

It doesn't "ignore" CVSROOT/passwd, it just uses /etc/shadow by default
if the user isn't found in CVSROOT/passwd.  You can disable that in your
CVSROOT/config file, but that won't stop you from entering your system
password.  It may make you feel a bit better to know that the password
isn't sent as plaintext, it's scrambled (but the scrambling is easy to
reverse).

> it said to look at the "remote repositories" sectionof cederqvist.
> following the link, i can't find any section called "remote
> repositories" in the table of contents.  was this section renamed?

No, it's section 2.9.  Click on "Contents" to see the complete Table of
Contents (or just click on section 2 and work your way down).

It sounds like you could benefit from reading the whole thing.

-Larry Jones

Shut up and go get me some antiseptic. -- Calvin




reply via email to

[Prev in Thread] Current Thread [Next in Thread]