Re: gCvs: Can SSH authentication be done over the cvsgui pipe?

Am 10.03.2006 um 07:28 schrieb Guy Rouillier:

> I've gotten used to using ssh-agent on Linux to make SSH work.   
> Tonight,
> while running from within the Anjuta IDE, I tried to draw a graph
> without first firing up ssh-agent.  I happened to notice that cvsnt
> prompted me for an SSH password in the Anjuta-initiated terminal  
> window.
>   On a lark, I typed in the password and the graph appeared!
>
> So, I'm wondering if we are supposed to be receiving the password
> request from cvsnt via the cvsgui pipe, prompting the user for the
> password via a GUI popup, and caching the password for future use.  I
> tried drawing a second graph to see if cvsnt was already caching the
> password; apparently not, since I saw the prompt again in the terminal
> window.
>
> We actually had this same problem with pserver authentication over a
> year ago; I found a bug in cvsnt that caused it not to send the  
> password
> request over the cvsgui pipe.  So it shouldn't take long to find it  
> for
> ssh if ssh is supposed to work the same way.

IIRC, the trick to make pserver bring up the password dialog is to  
have it check for the PASSWORD (or whatever it's called exactly)  
environment variable through the cvsgui protocol, i.e. the cvsgui- 
aware tool will ask gCvs/WinCvs/MacCvs for that environment variable,  
which will bring up the password dialog.
Caching of the password is done by cvs itself in the .cvspass file  
(or in cvsnt in .cvs/cvspass, IIRC).

For ssh, things are a different matter, since cvs will open an ssh  
pipe and the password is requested by ssh, which has no idea there's  
the cvsgui protocol behind.
The only mechanism to intercept this would be to inspect the stdout  
and bring up the password dialog when "password:" appears on stdout.  
Then the password could be fed into the stdin pipe. However, this  
approach is a bit of a hack, since "password:" might appear in other  
contexts, too.

Since a mechanism exists (using ssh-agent), I'd suggest not to try  
and fix this problem in cvsgui, unless there's a 100% way of  
implementing it...

</jum>



 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/cvsgui-dev/

<*> To unsubscribe from this group, send an email to:
    [email protected]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/