Re: The best CVS
Re: The best CVS
- Subject: Re: The best CVS
- From: Bill Bumgarner <email@hidden>
- Date: Tue, 8 Jan 2002 16:22:13 -0500
[Crossposting as this subject comes up about once every six months or
so... The original thread was asking what the best configuration of CVS
was for use with WebObjects.]
Pserver: Unless you are explicitly setting up CVS for anonymous access or
have isolated CVS behind a firewall, you should avoid using pserver at
all costs. It is grossly insecure-- it uses encryption about as strong as
ROT13 to 'protect' the password data and, as such, takes about 5 minutes
for a script kiddie with a packet sniffer to grab passwords.
In any other context than those mentioned, you are far better off going
with a CVS configuration that uses SSH to control authentication to the
server.
Also: avoid file wrappers as much as possible. There is no need to use
file wrappers with EOModel files, WO Components or-- as of OS X-- NIB
files. It is still critical to mark the appropriate file types as binary,
however.
I have written a number of articles regarding CVS, WebObjects, and OS X.
Some links to the archives -- should give you some links into the threads,
as well:
http://www.omnigroup.com/mailman/archive/webobjects-
dev/2001-February/006876.html
http://www.omnigroup.com/mailman/archive/webobjects-
dev/2001-February/006925.html
http://www.omnigroup.com/mailman/archive/webobjects-
dev/2001-June/011402.html
http://www.omnigroup.com/mailman/archive/webobjects-
dev/2001-June/011457.html
http://www.omnigroup.com/mailman/archive/webobjects-
dev/2001-June/011503.html
Also, for anyone using ssh+CVS w/PBX in a situation where ssh wants to ask
for a password, you might want to grab SSHPassKey -- see the announce
message I posted to the lists earlier today -- it provides a solution that
allows PBX/cvs to communicate via ssh even when ssh needs to ask for a
password (personally, I try to avoid using public key authorization as
much as possible-- it opens trust dependencies between machines that I'm
not 100% comfortable with).
b.bum