You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Justin <co...@googlemail.com> on 2009/09/16 11:59:59 UTC
anon write access with author?
Hi,
We run svnserve with anon-access=write to save us maintaining password
& user lists. However we'd like to be able to populate the author
field (which is empty with anonymous write access).
We're not worried about properly authenticated users/authors (we are a
small enough group to trust each other to Do The Right Thing), but
nonetheless we'd like the option to populate the Author field when we
commit changes as it is useful to see who did what.
Is there a way to add an Author without being fully authenticated?
Cheers,
Justin
------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2395478
To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].
Re: anon write access with author?
Posted by Justin <co...@googlemail.com>.
Stefan and Andrey,
Thanks very much for the prompt replies - perhaps we'll bite the
bullet and do some authentication in that case!
Thanks again,
Justin
On Sep 16, 8:43 am, Andrey Repin <an...@freemail.ru> wrote:
> Greetings, Justin!
>
> > We run svnserve with anon-access=write to save us maintaining password
> > & user lists. However we'd like to be able to populate the author
> > field (which is empty with anonymous write access).
>
> You can effectively bind Subversion to many authentication schemes.
> No need to create separate userbase.
>
> > We're not worried about properly authenticated users/authors (we are a
> > small enough group to trust each other to Do The Right Thing),
>
> It's not a question of trust (i.e. authorization), it's a question of
> authenticity.
> With a proper authentication, if you see a doubtful/intriguing code, instead
> of yelling "who is responsible for this beautiful piece of mindcraft?", you
> would just come and ask specific person for a moment of teaching.
> Also, authentication will prevent unwanted commits, if by a strange
> coincidence your repository would became open to the world.
>
> > but nonetheless we'd like the option to populate the Author field when we
> > commit changes as it is useful to see who did what.
>
> --
> WBR,
> Andrey Repin (anrdae...@freemail.ru) 16.09.2009, <16:37>
>
> Sorry for my terrible english...
>
> ------------------------------------------------------http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessa...
>
> To unsubscribe from this discussion, e-mail: [users-unsubscr...@subversion.tigris.org].
------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2395508
To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].
Re: anon write access with author?
Posted by Andrey Repin <an...@freemail.ru>.
Greetings, Justin!
> We run svnserve with anon-access=write to save us maintaining password
> & user lists. However we'd like to be able to populate the author
> field (which is empty with anonymous write access).
You can effectively bind Subversion to many authentication schemes.
No need to create separate userbase.
> We're not worried about properly authenticated users/authors (we are a
> small enough group to trust each other to Do The Right Thing),
It's not a question of trust (i.e. authorization), it's a question of
authenticity.
With a proper authentication, if you see a doubtful/intriguing code, instead
of yelling "who is responsible for this beautiful piece of mindcraft?", you
would just come and ask specific person for a moment of teaching.
Also, authentication will prevent unwanted commits, if by a strange
coincidence your repository would became open to the world.
> but nonetheless we'd like the option to populate the Author field when we
> commit changes as it is useful to see who did what.
--
WBR,
Andrey Repin (anrdaemon@freemail.ru) 16.09.2009, <16:37>
Sorry for my terrible english...
------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2395490
To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].
Re: anon write access with author?
Posted by Stefan Sperling <st...@elego.de>.
On Wed, Sep 16, 2009 at 04:59:59AM -0700, Justin wrote:
> Hi,
>
> We run svnserve with anon-access=write to save us maintaining password
> & user lists. However we'd like to be able to populate the author
> field (which is empty with anonymous write access).
>
> We're not worried about properly authenticated users/authors (we are a
> small enough group to trust each other to Do The Right Thing), but
> nonetheless we'd like the option to populate the Author field when we
> commit changes as it is useful to see who did what.
>
> Is there a way to add an Author without being fully authenticated?
It's not possible to pass additional parameters to the svnserve
process via svn://, so no, I don't think what you want to do is
possible.
But you could setup authentication with SSH, using a single, shared,
and non-passphrase protected SSH key[*]. Then you could, on the server side,
take control of the command executed and pass a --tunnel-user option
to the svnserve process invoked on the server when connecting via svn+ssh://.
See http://svnbook.red-bean.com/nightly/en/svn.serverconfig.svnserve.html#svn.serverconfig.svnserve.sshtricks.fixedcmd
Stefan
[*] I'd still recommend to just do authentication anyway, and generate
a unique and passphrase-protected SSH key for each user.
------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2395480
To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].
Re: anon write access with author?
Posted by Ulrich Eckhardt <ec...@satorlaser.com>.
On Wednesday 16 September 2009, Justin wrote:
> We run svnserve with anon-access=write to save us maintaining password
> & user lists. However we'd like to be able to populate the author
> field (which is empty with anonymous write access).
[...]
> Is there a way to add an Author without being fully authenticated?
I think most if not all clients allow caching credentials, so entering the
info once should do the job. What we do here is that username and password
are the authors last name in lowercase, which allows authentication but
without having to remember yet another password (or, maybe worse, reusing an
existing one).
cheers
Uli
--
ML: http://subversion.tigris.org/mailing-list-guidelines.html
FAQ: http://subversion.tigris.org/faq.html
Docs: http://svnbook.red-bean.com/
Sator Laser GmbH
Geschäftsführer: Thorsten Föcking, Amtsgericht Hamburg HR B62 932
**************************************************************************************
Sator Laser GmbH, Fangdieckstraße 75a, 22547 Hamburg, Deutschland
Geschäftsführer: Thorsten Föcking, Amtsgericht Hamburg HR B62 932
**************************************************************************************
Visit our website at <http://www.satorlaser.de/>
**************************************************************************************
Diese E-Mail einschließlich sämtlicher Anhänge ist nur für den Adressaten bestimmt und kann vertrauliche Informationen enthalten. Bitte benachrichtigen Sie den Absender umgehend, falls Sie nicht der beabsichtigte Empfänger sein sollten. Die E-Mail ist in diesem Fall zu löschen und darf weder gelesen, weitergeleitet, veröffentlicht oder anderweitig benutzt werden.
E-Mails können durch Dritte gelesen werden und Viren sowie nichtautorisierte Änderungen enthalten. Sator Laser GmbH ist für diese Folgen nicht verantwortlich.
**************************************************************************************
------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2395535
To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].