Big question: What do you think using :pserver: at this point, gain you and your users over just :ext: over ssh? Because they already have (and will continue to have) valid system shell login, from h
I'm not quite sure what you mean by "mapping" users. Using the third field of the CVSROOT/passwd file to have the server run as some user other than the actual user. Yep, that's what I am/was doing.
Using ssh in a restricted execution mode in general and for restricted execution of CVS is discussed in many places. I suggest you may find more reading useful... try these documents: http://www.idea
I'm not quite sure what you mean by "mapping" users. Using the third field of the CVSROOT/passwd file to have the server run as some user other than the actual user. Yep, that's what I am/was doing.
Using the third field of the CVSROOT/passwd file to have the server run as some user other than the actual user. There's no need to use pserver for that. In fact, pserver is a giant security hole tha
That's the confusing thing; "id" tells me I'm a member of cvsadmin. Is there any restriction about userid range? I'm 1000, cvsadmin group is 502. In that case, my guess is that you're not using your
In that case, my guess is that you're not using your account, you're using the generic "cvs" account (you say all of your CVS users are mapped to the same "cvs" system user and it's the system user t
I guess your right. I'll re-read the pserver section. Both systems are internal, security risk in nil. I did delete the passwd file, and then I couldn't login to the repository. Logging in to :pserve
Todd, Thanks for the answers. Regarding your comments, my intent is less to provide a "secure" environment (we don't expose cvs outside the internal network), and I'm not terribly worried about malic
Plain text only, PLEASE! <SNIP> <SNIP> 1) the users should not be working directly in the repository except in very rare cases and should be approved for doing the work there, this should be a stated
For questions about CVSNT please refer to the CVSNT newsgroup: news://news.cvsnt.org/support.cvsnt or http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt Since the pserver method writes the username
Hi all, This issue is related to using CVS from Eclipse using PSERVER method. We could access CVS from Eclipse and things were fine ...till the point when the our DOMAIN name got changed i.e. all wer
Hi all, I am using fedora core 3, Concurrent Versions System (CVS) 1.11.17 (client/server) xinetd Version 2.3.13 libwrap loadavg and I am trying to set up a CVS pserver on my machine ( without any se
<SNIP> Two things that might speed it up some, 1) update to something past 1.11.1p1, they started using mmap on the files in 1.11.2 which CAN make things faster. and as an added bonus you get securit
LOL. Okay. :-) (I just hope you didn't hur Arthur Barrett's feelings. :-) I honestly think that the cvsnt stuff has its place in the scheme of things. I just wish they didn't have so many different a
No, and I won't. I am a long time believer of CVS pure ;) Well, I was ;) Yeah, I've seen that coming along. Hmm... Good idea... Takes a long time to implement, though... See below. I'd assume most p
Larry and Derek would both need to agree with me that pserver needs to be killed before we could rip things out of the feature version. I doubt that will happen given how many folks still use pserver
The "hence" above was indicating that I am writing a passwd command for the pserver stuff, as Jim suggested would be a nice feature... On dev, so far, no hard statement against doing this... If you
Search the info-cvs archives and you might have more luck. The short answer is don't use it. Move along, this is not the protocol you are looking for... For HTML Cederqvist manual for cvs 1.12.11, lo
[ On Monday, January 31, 2005 at 10:21:07 (-0400), Néstor Boscán wrote: ] Sure, of course. Thousands do it every day, many times per day, all over the world. (assuming you don't use the fundamental