|
From: | Nathan Kidd |
Subject: | Re: CVS, RSH and direct access to repository |
Date: | Fri, 16 Jan 2004 14:05:55 -0500 |
User-agent: | Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.6b) Gecko/20031205 Thunderbird/0.4 |
Jeeva Sarma wrote:
I want to know if there is any method to prevent users from directly accessing repository.I read of one method, using Openssh and restrict users to one command, but that would prevent the users from even logging on to the machine. Some developers use this machine for other purposes(do their regular development and stuff).We plan to have CVS server on solaris, windows clients using ssh authentication. Pls advice.
I haven't done this myself so perhaps someone can point out a flaw in this plan, but:
What about setting up a chroot jail that contains your cvs repository along with separate cvs user accounts and sshd restricted to the cvs command running on a different port. If your UIDs/GIDs are separate then local users (outside the jail) won't have access to the repository. The caveat is that for every developer that wants local ssh access in addition to cvs access, you'll have to maintain two user accounts.
-Nathan
[Prev in Thread] | Current Thread | [Next in Thread] |