hello
i want to reduce ssh login only for svn and cvs
how should i config sshd ?

thanks
sylvain

Sylvain Ferriol <sferriol@imag.fr> writes:
> i want to reduce ssh login only for svn and cvs
> how should i config sshd ?

sshd can be configured to accept incoming sessions only for users in
certain groups.

But users in these groups would be allowed to use ssh for anything
else than cvs or svn too.

So what you can do is to create alternate user accounts, with as login
shell some restricted shell that allows them only to use cvs (or svn).

Have a look at: http://www.informatimago.com/linux/c...d-ssh-cvs.html

--
__Pascal Bourguignon__ http://www.informatimago.com/

"What is this talk of "release"? Klingons do not make software
"releases". Our software "escapes" leaving a bloody trail of
designers and quality assurance people in its wake."

Pascal Bourguignon wrote:

> Sylvain Ferriol <sferriol@imag.fr> writes:
> > i want to reduce ssh login only for svn and cvs
> > how should i config sshd ?
>
> sshd can be configured to accept incoming sessions only for users in
> certain groups.
>
> But users in these groups would be allowed to use ssh for anything
> else than cvs or svn too.
>
> So what you can do is to create alternate user accounts, with as login
> shell some restricted shell that allows them only to use cvs (or svn).
>
> Have a look at: http://www.informatimago.com/linux/c...d-ssh-cvs.html

You can also review the Subversion documentation and its notes on
setting up SSH authorized keys to *only* permit certain operations, by
limiting the command line options of that key. This is often used with
the SSH+svnserve setup.

Alternatively, Subversion permits HTTPS based access, but the UNIX
clients tend to store the user password locally in clear text: I
consider that a huge security misbehavior, and recommend the SSH based
access for exactly this reason.

CVS, I'd suggest you throw out immediately and switch over to
Subversion, if at all possible.

On 2006-09-29 13:43:31 +0200, Sylvain Ferriol <sferriol@imag.fr> said:

> hello
> i want to reduce ssh login only for svn and cvs
> how should i config sshd ?

You can modify the Restricted Shell in order to accept svn, currently
it accepts cvs.

--
Sensei <senseiwa@Apple's mail>

Research (n.): a discovery already published by a chinese guy one month
before you, copying a russian who did it in the 60s.