[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

:ext:server support for --allow-root?

From: Gary Funck
Subject: :ext:server support for --allow-root?
Date: Thu, 24 Jan 2008 17:41:30 -0800
User-agent: Mutt/1.5.17 (2007-11-01)

After the previous discussion regarding pserver, I'm
considering continuing our use of :ext:server+ssh,
but need to extend it to allow write access to
a repository that is on an internal machine behind
the firewall.

One suggestion is documented here,
under "How do I access an internal CVS server via an SSH gateway?"

The write says: "This is only for cases where you cannot
tunnel without a key."  What situations is it talking about?
How would one set things to provide tunneling without a key?
IP forwarding?  Changing the firewall router so that allows
direct access to the (NAT'ed) internal server's ssh port?
Not my preference.

The author suggests:
  ssh -t address@hidden ssh "$@" 
executed from the firewall'd host.
I'd like to change that to:
  ssh -t address@hidden  \
    ssh "cvs server --allow-root=<path_to_cvs_root>"
to restrict the CVS repositories that this external server
can access.  Is this possible?  I saw patches that support this,
described here:
that support this feature, but am wondering if cvs 1.11.22
supports this feature?

  - Gary

reply via email to

[Prev in Thread] Current Thread [Next in Thread]