ssh only for cvs and svn - SSH

This is a discussion on ssh only for cvs and svn - SSH ; hello i want to reduce ssh login only for svn and cvs how should i config sshd ? thanks sylvain...

+ Reply to Thread
Results 1 to 4 of 4

Thread: ssh only for cvs and svn

  1. ssh only for cvs and svn

    hello
    i want to reduce ssh login only for svn and cvs
    how should i config sshd ?

    thanks
    sylvain

  2. Re: ssh only for cvs and svn

    Sylvain Ferriol writes:
    > i want to reduce ssh login only for svn and cvs
    > how should i config sshd ?


    sshd can be configured to accept incoming sessions only for users in
    certain groups.

    But users in these groups would be allowed to use ssh for anything
    else than cvs or svn too.

    So what you can do is to create alternate user accounts, with as login
    shell some restricted shell that allows them only to use cvs (or svn).

    Have a look at: http://www.informatimago.com/linux/c...d-ssh-cvs.html

    --
    __Pascal Bourguignon__ http://www.informatimago.com/

    "What is this talk of "release"? Klingons do not make software
    "releases". Our software "escapes" leaving a bloody trail of
    designers and quality assurance people in its wake."

  3. Re: ssh only for cvs and svn


    Pascal Bourguignon wrote:

    > Sylvain Ferriol writes:
    > > i want to reduce ssh login only for svn and cvs
    > > how should i config sshd ?

    >
    > sshd can be configured to accept incoming sessions only for users in
    > certain groups.
    >
    > But users in these groups would be allowed to use ssh for anything
    > else than cvs or svn too.
    >
    > So what you can do is to create alternate user accounts, with as login
    > shell some restricted shell that allows them only to use cvs (or svn).
    >
    > Have a look at: http://www.informatimago.com/linux/c...d-ssh-cvs.html


    You can also review the Subversion documentation and its notes on
    setting up SSH authorized keys to *only* permit certain operations, by
    limiting the command line options of that key. This is often used with
    the SSH+svnserve setup.

    Alternatively, Subversion permits HTTPS based access, but the UNIX
    clients tend to store the user password locally in clear text: I
    consider that a huge security misbehavior, and recommend the SSH based
    access for exactly this reason.

    CVS, I'd suggest you throw out immediately and switch over to
    Subversion, if at all possible.


  4. Re: ssh only for cvs and svn

    On 2006-09-29 13:43:31 +0200, Sylvain Ferriol said:

    > hello
    > i want to reduce ssh login only for svn and cvs
    > how should i config sshd ?


    You can modify the Restricted Shell in order to accept svn, currently
    it accepts cvs.

    --
    Sensei

    Research (n.): a discovery already published by a chinese guy one month
    before you, copying a russian who did it in the 60s.


+ Reply to Thread