Re: [Savannah-hackers] rattaching mailing list to savannah

[Mark H. Weaver]

Guillaume Morin <address@hidden> writes:

> Dans un message du 01 mar à 18:19, Loic Dachary écrivait :
> >  Could you describe shortly the functionalities of the cgi-bin ? 
> > What does it do ? What arguments does it take ? What does it return ?
> 
> It will take the name of the list and its admin password.
> It will return something like
> [...]

Hmm.  Would this admin password would go over in cleartext?  If so, I'd
prefer to see you use ssh.

Do so as follows:

  - Create a non-priviledged user on fencepost (let's say mmpwchk)
    with a special shell program which just inputs the parameters,
    outputs the result, then exits.

  - Create an ssh-keypair on subversions using ssh-keygen, with no
    passphrase.  Make sure the private key (~/.ssh/identity) is well
    protected (not readable by unauthorized users).  Copy the public
    key (~/.ssh/identity.pub) to fp:~mmpwchk/.ssh/authorized_keys

  - Now, from subversions, you can do something like this:

    (echo $list_name; echo $admin_pw) \
      | ssh -i <identity_file> address@hidden > result

        Mark