You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@subversion.apache.org by Jani Averbach <ja...@cc.jyu.fi> on 2003/11/07 00:27:52 UTC

store-password = no --> server certificates are not stored any more

Hi!

If I set store-password = no in auth section in config file, server
sertificates are not stored anymore to the .subversion/auth dir.

Is this intentional?

Gnu/Linux, svn --version 
svn, version 0.32.1 (r7497)
   compiled Nov  4 2003, 16:03:52


BR, Jani

-- 
Jani Averbach

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org

Re: store-password = no --> server certificates are not stored any more

Posted by Ben Collins-Sussman <su...@collab.net>.
I'm totally cool with 'store-password' only affecting the caching of
'svn.simple' credentials on disk, and not other sorts of credentials.  
I just don't have time to think about it right now.   Maybe someone can
submit a patch?



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org

Re: store-password = no --> server certificates are not stored any more

Posted by Philip Martin <ph...@codematters.co.uk>.
Jani Averbach <ja...@cc.jyu.fi> writes:

> On 2003-11-06 18:29-0600, Ben Collins-Sussman wrote:
>> 
>> Yes.  We need to rename that variable to "store-credentials".  It
>> activates/deactivates disk caching of *all* credentials (passwords,
>> server certs, etc.).
>
> I don't know where I have been when this is decided, but IMHO, this
> is not a good thing to do (tm).
>
> Reason:
> I would have very well environment where I like authenticate my svn up
> data by using ssl + server certificate, but I don't want store my
> credentials (password) on the disk.
>
> So if this will proceed like planned, above setup is not possible, right?
> Or am I supposed to use --no-auth-cache?
>
>> 
>> Any volunteers?  :-)
>> 
>
> It depends on answer of above questions. =)

When originally introduced the store-password option controlled
whether the password was stored in the working copy, but it did not
affect the username which was always stored (the --no-auth-cache flag
would override store-password and cause neither password or username
to be stored in the working copy.)  At some point the auth storage
stuff got reworked and the behaviour of store-password changed, it
started to affect both username and password.  I didn't like this
change but the auth stuff has so many layers, not to mention an
interface I dislike, that I never got round to doing anything about
it.

I would like to be able to store usernames, certificates, etc. without
storing passwords.

-- 
Philip Martin

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org

Re: store-password = no --> server certificates are not stored any more

Posted by Jani Averbach <ja...@cc.jyu.fi>.
On 2003-11-06 18:29-0600, Ben Collins-Sussman wrote:
> 
> Yes.  We need to rename that variable to "store-credentials".  It
> activates/deactivates disk caching of *all* credentials (passwords,
> server certs, etc.).

I don't know where I have been when this is decided, but IMHO, this
is not a good thing to do (tm).

Reason:
I would have very well environment where I like authenticate my svn up
data by using ssl + server certificate, but I don't want store my
credentials (password) on the disk.

So if this will proceed like planned, above setup is not possible, right?
Or am I supposed to use --no-auth-cache?

> 
> Any volunteers?  :-)
> 

It depends on answer of above questions. =)

BR, Jani

-- 
Jani Averbach


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org

Re: store-password = no --> server certificates are not stored any more

Posted by Ben Collins-Sussman <su...@collab.net>.
On Thu, 2003-11-06 at 18:27, Jani Averbach wrote:
> Hi!
> 
> If I set store-password = no in auth section in config file, server
> sertificates are not stored anymore to the .subversion/auth dir.
> 
> Is this intentional?

Yes.  We need to rename that variable to "store-credentials".  It
activates/deactivates disk caching of *all* credentials (passwords,
server certs, etc.).

Any volunteers?  :-)




---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org