info-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: pserver over ssh with no password to provide


From: Aaron Bono
Subject: Re: pserver over ssh with no password to provide
Date: Thu, 31 Aug 2006 10:14:51 -0500

On 8/29/06, Guillaume Ramage <address@hidden> wrote:
Hi,

I am developping a java application which performs a checkout on a cvs
repository which is secured with SSH.

This application must use 100% java libraries. I use these libraries:
- cvs client implementation is javacvs ( netbeans.org)
- SSH layer is JSch (http://www.jcraft.com/jsch/)

I can access the repository using cvs.exe with the setting of
CVS_RSH="C:\program files\TortoiseCVS\TortoisePlink.exe" -i "C:\mykey.ppk"
CVSROOT=:ext:address@hidden:/var/lib/cvs
and I don't have to set any password in CVSROOT, I would like to
reproduce it in my program.

My problem is :
In my java program I use a pserver connection over a SSH tunnel,
but I still need to provide the password for CVS connection, which is
not acceptable for this program.

Can anyone help?
Is it possible to connect using pserver without having to provide a
password ?
Is there any more appropriate connection method ?
Is there any documentation about pserver authentication protocol ?

thanks
Guillaume Ramage

 
I am doing much the same thing as you describe here.  I do provide a password and that password is kept encrypted in a properties file.  That way no one can just look at the properties file to determine what the password is, only the application can decrypt it.  I have also created a special user for the check in/out so I can better control what the application is allowed to do - I have even put scripts into commitinfo to deny access to the "wrong things" for the application user.

Alternatively, you can prompt the user for the password when you need to interact with CVS.

If your problem is a little more complex, let me know and I would be happy to help more.  We are experimenting a lot with different ways to integrate Java and CVS so are very interested in other approaches.

==================================================================
   Aaron Bono
   Aranya Software Technologies, Inc.
   http://www.aranya.com
   http://codeelixir.com
==================================================================
reply via email to

[Prev in Thread] Current Thread [Next in Thread]