Re: TortoiseCVS - SecurID Issues with UNIX repository

Hi John (and Ben),
 
The authentication between client and server is either:
* between ssh client and ssh server
  - the ssh client may be TortoisePlink
  - the ssh client may be Putty (via the build in :ssh: protocol in
CVSNT client)
  - the client may be any other ssh client via :ext:
  - the server may be OpenSSH
  - the server is most likely to be Solaris SSH (particularly if Sparc,
or Solaris 8 or 9)
    http://docs.sun.com/app/docs/doc/816-5166/sshd-1m?l=en&a=view
* between CVSNT client and either CVS or CVSNT Server (yes CVSNT server
runs on Solaris Sparc)
  - the protocol may be :pserver:, :gserver:, :sspi: or :sserver:
 
Whilst Ben's instructions may be suitable when using Solaris with
openssh - I know nothing about that, being an old Solaris admin I just
use the solaris programs that come on the disk ;)
 
CVSNT server can work with PAM, and I believe that SecurID for Solaris
uses PAM (I do not know if CVS works with PAM - I know older versions
certainly didn't because it's a change we made first in CVSNT - but they
often backport our changes to CVS eventually so it may be in a recent
unstable release of CVS):
http://www.rsa.com/node.aspx?id=1177
 
I work for March Hare Software, and we are the people who write the code
for the client and the server. We have been working with RSA for the
past year or so to integrate CVS authentication with SecurID.  If you
want to upgrade to CVS Suite we can definitely help you with your
authentication requirements - please contact Glen Starrett on
800-653-1501 x803 for a quote.
 
Here are some notes:
* relying on the complimentary community downloads for commercial
purposes is unwise.  If you are using our software in a professional
software development environment please support the project by
purchasing CVS Suite
* we do not recommend using TortoisePlink - the cvsnt client has had
built in support for SSH for over 6 years - and it works together with
Putty (because it is the same code) keys etc.  Using TortoisePlink
requires a whole additional image loaded into memory...
* it's taking us a while to sort out our integration with SecurID for a
range of reasons, but without a doubt any organisation that implements
SecurID is concerned about security and that is something we want to
WORTH TOGETHER WITH OUR CUSTOMERS, not provide some arbitrary solution.

* CVS and TortoiseCVS generally perform several short commands in a
short space of time.  IDE's like Eclipse and Visual Studio do this even
more.  A 'traditional' SecurID implementation (like what I imagine Ben
is describing) will require you enter a new token for each command -
this is very time consuming.  A more common solution is to treat CVS
like a printer or a mapped network drive - something that needs to be
authenticated only once per session, and we already support that with
CVSNT provided that the windows client authenticates with Active
Directory at some stage:
http://march-hare.com/cvspro/?pdf=j
 
I don't get to monitor the community forums as closely as I'd like - if
you need to discuss our solutions please contact Glen directly or
sales-qn/[email protected]
 
Regards,
 
 
Arthur Barrett
Product Manager
CVSNT
 
 

	-----Original Message-----
	From: MARTIN, JOHN E (ATTSI) [mailto:[email protected]] 
	Sent: Tuesday, 14 September 2010 4:28 AM
	To: tortoisecvs-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
	Subject: [TortoiseCVS] TortoiseCVS - SecurID Issues with UNIX
repository
	
	

	We have a cvs repository on a SUN UNIX box.  We were using the
TortoiseCVS windows client with no issues until here lately.  The
company security team has implemented that UNIX use RSA SecurID instead
of standard passwords.  This has broken the access via the TortoiseCVS
client, any suggestions would be greatly appreciated.

	 

	Thank you,

	John Martin

------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev

_______________________________________________
tortoisecvs-users mailing list
tortoisecvs-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
https://lists.sourceforge.net/lists/listinfo/tortoisecvs-users