[cvsnt] Re: -x option with sspi

[Mike Wake]

Heya,

On the Tortoise Mailing list
Glen Starret wrote:
<snip>
According to cvs --help-options:
-x              Encrypt all net traffic (fail if not encrypted).
-y              Encrypt all net traffic (if supported by protocol).

It looks like it's doing what you asked:  -x fails the command if it 
can't be encrypted.  If you use -y instead, it should fail gracefully. 
At least that's what it looks like it should do--SSPI supports 
encryption but doesn't in the case of Linux, I would imagine if -y 
should fail gracefully still.
</snip>

And I wrote back
I just tried this in a sandbox checked out using :sspi: and -y appears 
to fail in the same manner (See Below).  Also -y is not documented in 
the Reference Manual.  http://www.cvsnt.org/manual/Global-options.html 
.... Back to the cvsnt mailng list .

cvs update BranchPerFeature.txt (in directory D:\HowItCouldBeDone\sand)

***** CVS exited normally with code 0 *****

cvs -x update BranchPerFeature.txt

***** CVS exited normally with code 1 *****

cvs [update aborted]: end of file from server (consult above messages if 
any)

cvs -y update BranchPerFeature.txt

***** CVS exited normally with code 1 *****

cvs [update aborted]: end of file from server (consult above messages if 
any)

Cheers
Mikew




Mike Wake wrote:

> Hi All,
> 
> I found a fix that I'll also post to the tortoise list.
> The code below shows how the -x option is added to CVS actions and how 
> it can be disabled within the Tortoise client if you are using a linux 
> server with winbind and the SSPI protocol.
> 
> Just add a DWORD registry entry for
> HKEY_CURRENT_USER\Software\TortoiseCVS\Data Encrption and set it to 0.
> 
> 
> Looking at
> http://cvs.sourceforge.net/viewcvs.py/tortoisecvs/TortoiseCVS/src/CVSGlue/CVSAction.cpp?rev=1.174&view=auto 
> 
> 
>     if ((((myCVSRootHolder.GetProtocol() == "sspi") &&
>            WindowsPlatformIsNT()) ||
>          (myCVSRootHolder.GetProtocol() == "gserver")) &&
>         TortoiseRegistry::ReadBoolean("Data Encryption", true))
>     {
>         args.add_global_option("-x");
>     }
> 
> Cheers Mikew
> 
> Tony Hoyle wrote:
> 
>> Mike Wake wrote:
>>
>>> Hi All,
>>>
>>> I've upgraded from v2.0.34 on a win2k machine to v2.0.51b on a linux 
>>> machine using winbind to enable sspi logins.
>>>
>>> Does anyone know what is required to get the -x option to work/not 
>>> fail when using sspi?(Used by the tortoise client).
>>
>>
>>
>>> The docs say that about the -x option "As of this writing, this is 
>>> only implemented when using a GSSAPI connection"
>>
>>
>>
>> I'll need to fix that, as it hasn't been true for a very long time.
>>
>> However, encryption isn't supported by winbind, so the Unix CVSNT 
>> can't do it.  (You could put in a feature request with the samba 
>> people for it I guess... it'd be relatively easy to add once the 
>> support is there).
>>
>> Tony
>> _______________________________________________
>> cvsnt mailing list
>> cvsnt at cvsnt.org
>> http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt
> 
> _______________________________________________
> cvsnt mailing list
> cvsnt at cvsnt.org
> http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt