[Macsec] Semi-OT: CVS over SSH

[Johan Allard [EMAIL PROTECTED]]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

i had the exact same problem a while ago and I ended up using the command 
line client only. I am a unix-geek so command line stuff doesn't scare me. 
I didn't find any client real intuitive with different branches and stuff 
like that so it was easier to just use the command line ssh client.

If you know that gcvs works you can probably use that under XFree86 in OS X.

please let us/me know if you find a better solution.

//johan

- --On måndag 18 mars 2002 16.04 -0500 Marion Bates 
<[EMAIL PROTECTED]> wrote:

> Hi folks,
>
> Sorry for the off-topic nature of this request, but I am reaching the end
> of my rope here. We have been told that we need to use a central CVS
> server within our department for all our code development, and for
> security reasons the client-server communication must be done via SSH. I
> am the only Mac user in the department, so there's really no one here
> that I can go to for help.
>
> The CVS server is Linux (Debian I think) and my Mac is running 10.1.3 and
> the shared-disk Classic environment under that.
>
> The heuristic under Linux is to generate an SSH keypair and install the
> pub key on the server such that you need only enter your passphrase to
> connect. You then invoke ssh-agent and use that to spawn a shell, then
> launch gcvs (Gnome CVS graphical client) from that, such that the
> server's ssh request is caught by ssh-agent. The rest of the CVS process
> is normal.
>
> I have done the ssh keypair exchange and used ssh-agent successfully on
> X, and I've tried using MacCvsCarbon v.3.2 (which has built-in ssh
> support) and it _sort of_ works but always hangs after an import. And
> whether it's an interface misunderstanding thing or a bug thing or what,
> we can't seem to make sense of this client with regard to checkouts and
> commits.
>
> I've also tried using Classic MacCVS but it has no ssh support, so I
> tried setting up SSH tunneling with MacSSH and having the MacCVS client
> connect to localhost, but that didn't go well either.
>
> There is also CVL (Concurrent Version Librarian) for OS X, which seems
> like the best bet in some ways, but it generates CVS commands that are
> apparently invalid. I think this may be due to the command-line CVS
> version being too old (CVL requires 1.7 or greater and when I run "cvs
> -v" it reports v. 1.10). (Aside -- how/where do I upgrade the
> command-line CVS software? Is there a nice easy OS X package or do I try
> -- gulp -- to do it from the standard CVS source distro?) To attempt to
> solve the SSH issue with CVL, I set up the ssh-agent thing first and then
> used "open" from the command line within the ssh-agent-spawned bash shell
> to launch CVL within that environment. I hope this works similarly to
> launching x apps in Linux.
>
> Then there is this SSHPassKey OS X app I grabbed a few days ago, which
> _seems_ to try to be like ssh-agent but works through a GUI. Here's the
> introductory paragraph from its readme:
>
> "You must ssh to the server at least once from the command line to
> authorize the host key. The hostname used must be exactly the same as
> used within, say, the CVSROOT.
>
> The first time ssh contacts a host, it asks the user to validate the
> authenticity of the host. This question must be answered prior to being
> able to use the SSH_ASKPASS / SSHPassKey means of asking the user for a
> password via a GUI application."
>
> Uh...ok. So I hit the big button that says "Configure Project Builder to
> use SSH Ask Key" and I log out and log back in and try all my various
> clients again, but no improvement that I can see.
>
> Basically, has anyone tried to do this? Can anyone give me a "recipe" or
> point me to a good howto? I have a lot of missing knowledge here -- know
> just enough to get confused.
>
> Thanks in advance,
>
> -- MB
>
> -------------------------------------
> Marion Bates
> Institute for Security Technology Studies
> Dartmouth College
> Hanover, NH
> Phone: 603-646-0739
> Fax: 603-646-0660
> Email: [EMAIL PROTECTED]
> -------------------------------------
>
>
> _______________________________________________
> Macsec mailing list
> [EMAIL PROTECTED]
> http://www.macsecurity.org/mailman/listinfo/macsec



- -------------------------------------------------------
  www.remotor.net - The life you want just got closer
- -------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (Darwin)
Comment: For info see http://www.gnupg.org

iD8DBQE8lpG02R/kjydtKG0RAqGlAKCpQGP8H5vpBx3TAzxLwKCXtXyPywCZAcKS
8u1qfxeDG6zptmCacoMMboI=
=tiKM
-----END PGP SIGNATURE-----