RE: remote cvs access - recommendations

[Neil Aggarwal]

Pete:

We were able to set up cvs access thru ssh.  It gives us
a secure and simple solution.

Here is what we did:

SERVER SETUP (We use Linux)

You must be able to ssh to the server without it asking for you to
accept the host key or ask you for a password.  

Login to the cvs server as root and make sure 
these lines are in /etc/ssh/sshd_config:
        RSAAuthentication yes
        PubkeyAuthentication yes
        AuthorizedKeysFile      .ssh/authorized_keys

If you changed this file, restart the server by typing:
        /etc/init.d/sshd restart

WINDOWS CLIENT SETUP

On windows, you will need the cygwin utilities with openSSH and cvs
installed.

On the windows machine, open the cygwin command shell and type:
        ssh address@hidden
Login to the server to ensure that it does not ask you to accept the
host key.
Exit the ssh session.

cd .ssh
ssh-keygen -t rsa

This will generate keys for ssh. Since you need to generate a key
without a password, 
hit return on all of the inputs.

sftp address@hidden
Login and type the following commands:
        mkdir .ssh
        cd .ssh
        put id_rsa.pub authorized_keys
        quit
Exit the sftp session

ssh address@hidden
Login and type the following commands
        cd .ssh
        chmod 700 .
        chmod 0600 *
        exit

You should now be able to login to the server without it asking for a
password.

Now, you can use your favorite CVS client.  When you set it up, you will
need
to use an external connection method, set the CVS_RSH variable to the
full path 
to the ssh.exe file from cygwin and set the cvs client to the cygwin
executable.

Let me know if you need any additional help.

Thanks,
        Neil.

--
Neil Aggarwal, JAMM Consulting, (972)612-6056, www.JAMMConsulting.com
FREE! Valuable info on how your business can reduce operating costs by 
17% or more in 6 months or less! => http://newsletter.JAMMConsulting.com

> -----Original Message-----
> From: address@hidden 
> [mailto:address@hidden On 
> Behalf Of address@hidden
> Sent: Tuesday, October 07, 2003 10:30 AM
> To: address@hidden
> Subject: remote cvs access - recommendations
> 
> 
> hi all,
> 
> i've read about remote cvs access, and there are a LOT of 
> options: ssh,
> rsh, kerberos, pserver, and more.
> 
> my needs are simple.  i'm writing a latex book with just one other
> person.  the repository is sitting on a debian gnu/linux 
> machine that i
> have root access to.
> 
> can someone suggest an access method suitable for my needs?
> 
> i don't need anything fancy, scalable or even efficient, since there's
> just one other co-author and we're dealing mainly in text with a few
> image files.  it just needs to be secure, easy to set up and easy to
> use.
> 
> any suggestions would be greatly appreciated!
> 
> ========
> 
> on a related issue, i setup a pserver and was horrified to 
> discover that
> when i issued a "cvs login", it was ignoring 
> $CVSROOT/CVSROOT/passwd and
> instead was authenticating using /etc/shadow.  i inadvertantly sent a
> plaintext password over the internet!
> 
> after changing the password and disabling pserver via inetd, i started
> to read the cvs FAQ and saw this section:
> 
>    How do I set up a CVS server for access via SSH?
> 
> the url was:
> 
   http://ccvs.cvshome.org/fom//cache/10.html

it said to look at the "remote repositories" sectionof cederqvist.
following the link, i can't find any section called "remote
repositories" in the table of contents.  was this section renamed?


thanks!
pete

-- 
GPG Instructions: http://www.dirac.org/linux/gpg
GPG Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D


_______________________________________________
Info-cvs mailing list
address@hidden
http://mail.gnu.org/mailman/listinfo/info-cvs