Re: Trying to set up cvs + ssh + mac client

[Rob Helmer]

Hi Matt,


The loopback interface is a "virtual" network
interface, all modern OS's have support for it
( unix, mac, windows ). On BSD it shows up as
the network interface lo0. 

Loopback interfaces should answer on 127.0.0.1 
It also should answer as localhost, as per your
/etc/hosts file. 

Noone outside of your machine can talk to you
on this IP; they'll see themselves instead.
Unless they do a tunnel, in which case you can
let another server see your loopback interface,
and it will think it is talking to it's own
loopback interface.

So anyway, I run pserver out of inetd as usual, 
but I bind inetd to localhost by running it out of
rc.conf like this :

inetd -a localhost

If you need to run telnet or anything out of inetd,
then you're not going to be able to. SSH is better
anyway, but you can always run telnetd and ftpd
by themselves, although I don't recommend it.

I set the Mac user up. He's using MacCVS ( there are
actually two products called "MacCVS" by completely
different parties; I used the one that was opensourced
by Netscape ). For the SSH tunnel, he's using the
F-Secure SSH client for Macintosh. Setting the tunnel
up was very easy, just click around in the menus
on the Mac side. You don't need any special config
on the server side, just have SSH running.

The trick is to set your CVSROOT on the Mac side
to point at the Mac itself.. like this

:pserver:localhost:/cvs

I had some problems getting the Mac to answer on the
loopback address as I recall, I think it was some
configuration issue, like the loopback interface wasn't
set up correctly.

I found that you could tunnel from the Mac's external
IP to the loopback of the server, which doesn't really
do any harm because there's no unencrypted traffic 
floating around, but it's a bit odd. 

Hope that helps.


--
Rob Helmer
Namodn


On Tue, Feb 06, 2001 at 01:54:05PM -0800, Matt Munz wrote:
> Rob,
> 
>     Thanks for your reply.  Could I bother you to go into a little more
> depth?  If so...
> 
>     Could you explain the loopback interface?
>     Do you know what client the Mac Developer is using?
>     Do you know what ssh client the developer is using?
>     Do you know how they set up the tunnel?
> 
>     - Matt
> 
> ----- Original Message -----
> From: "Rob Helmer" <address@hidden>
> To: "Matt Munz" <address@hidden>
> Cc: "info-cvs mailing list" <address@hidden>
> Sent: Tuesday, February 06, 2001 1:38 PM
> Subject: Re: Trying to set up cvs + ssh + mac client
> 
> 
> > Hello Matt,
> >
> >
> > I run a pserver on the loopback interface of my CVS server
> > and I have a Mac developer SSH tunneling to it while
> > everyone else uses CVS_RSH=ssh1
> >
> > I don't know know of any other way to do it, but this
> > way seems to work quite well.
> >
> >
> > --
> > Rob Helmer
> > Namodn
> >
> > On Tue, Feb 06, 2001 at 10:33:24AM -0800, Matt Munz wrote:
> > > Hi All.
> > >
> > >     Feel free to rtfm me on this.  I'd be happy to read a manual that
> *clearly* addresses this issue.  If you know about one, please let me know.
> > >
> > >     I am connecting to my cvs server just fine with my win2k boxes
> running ssh1 clients.  I'm *not* using tunneling for this.  Cvs thinks it's
> using rsh via :ext:, and I have $CVS_RSH set to ssh.  But before I started
> patting myself on the back, I realized I needed to do the same thing on a
> Mac.  Not being as familiar with macs as I'd like to be, I went looking for
> notes on the web, without much success.  Now I'm here looking for solutions
> to the problem -- I'm trying to avoid hacks and "quick-fixes".
> > >
> > >     I'd prefer to have a command-line type of client that connects to
> the server in the same way that my win2k boxes do.  I'd also prefer to use
> only free software that installs relatively easily.  Do you know of a cvs
> client + ssh client that fits this description?
> > >
> > >     Back in the real world, any answers to the following questions would
> help a lot...
> > >
> > >     Is there a command-line cvs client for mac?
> > >
> > >     Can a mac connect to a cvs server using ssh w/o using port
> tunneling?
> > >
> > >     If absolutely necessary, how can I set up a tunnel easily, both on
> the server (OpenBSD/Unix), and the client?
> > >
> > >     Thanks for any help/advice you might have.
> > >
> > >     - Matt Munz
> > >       address@hidden
> > >
> > >
> > >
> > >
> 
> 
> _______________________________________________
> Info-cvs mailing list
> address@hidden
> http://mail.gnu.org/mailman/listinfo/info-cvs
>