[Cvsnt] Re: user-aliases ? - PARTIALLY WORKING NOW

[Brian Smith]

Tony Hoyle wrote:
> Brian Smith wrote:
>
> Pserver is easy to disable - just delete the protocol (eventually all
> protocols will be able to be disabled via the control panel anyway).
> Extending the passwd file with a 'valid protocols' field is also in the
> back of my mind somewhere.

Sure, but it is easy to accidently re-install the pserver_protocol.dll.

>> I believe that traditionally (on unix), :gserver: and :kserver: modes
>> have never sent the root in the authentication request because they have
>> never used the passwd file, so they never needed to tell the server what
>
> Certainly when encrypting it's good to have the option (I should
> probably call check_repository_password on the 'root' request to allow
> this).  However the check is a good one.  You don't want multiple files
> for user authentication... there already is one (passwd) and it serves
> its purpose.

Well, for :gserver: thea idea of "checking a password" seems wrong, but
  I understand your idea. I think you should check to see if :sspi: mode
ever actually uses the passwd file because I don't think it does.

- Brian

_______________________________________________
Cvsnt mailing list
Cvsnt at cvsnt.org
http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt