Ssh & CVS
Ssh & CVS
- Subject: Ssh & CVS
- From: Bill Bumgarner <email@hidden>
- Date: Wed, 27 Jun 2001 22:53:59 -0400
As Deirdre posted-- go here to find your ssh client. Amazing list!
http://linuxmafia.com/pub/linux/security/ssh-clients
To answer Karl-- Yes. It is a matter of....
- configuring sshd to not allow port forwarding or other services
via that box
- configuring the accounts to not allow anything but access to cvs
---
Sourceforge is a [good? works for me] example of a system configured
such that the cvs servers have wide access via ssh, but one is fairly
limited in what one can do via the cvs enabled account. Example:
[localhost:~] bbum% ssh -C cvs.sourceforge.net
Last login: Mon Jun 11 11:37:28 2001 from codefab.com on pts/0
Linux usw-pr-cvs1 2.2.18pre11-va2.0-servers4 #1 SMP Thu Mar 29 20:48:12
PST 2001 i686 unknown
Most of the programs included with the Debian GNU/Linux system are
freely redistributable; the exact distribution terms for each program
are described in the individual files in /usr/doc/*/copyright
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Welcome to cvs.sourceforge.net
This is a restricted Shell Account
You cannot execute anything here.
Connection to cvs.sourceforge.net closed.
On Wednesday, June 27, 2001, at 06:55 PM, Karl Kraft (via smart gateway)
wrote:
On Wed, 27 Jun 2001, Bill Bumgarner wrote:
Ssh is the way to go; you can find an ssh command line binary for
windows on the net. It isn't easy, but they exist (I can't remember
where we picked ours up, at this point). Ssh has the advantage of
security and compression (yes, CVS has compression, to, but ssh has
general purpose connectivity compressin-- try port forwarding a
database
connection with compression turned on and you'll see a 70% or so
performance improvement!).
b.bum
But is there a way to set up ssh for CVS only. That is give someone
access to your CVS repository via CVS, without allowing them to login to
the box, or port forward, or otherwise bootstrap the connection to
privleges outside of cvs?
--
K2 - email@hidden