Your message dated Thu, 21 Jan 2016 21:05:10 -0500
with message-id <[email protected]>
and subject line Re: Bug#312441: subversion: svn command seems to store my
credential without asking me
has caused the Debian Bug report #312441,
regarding subversion: svn command seems to store my credential without asking me
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
312441: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=312441
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: subversion
Version: 1.1.4-2
Severity: normal
I am running svn repo behind apache2 so I need to access it through
http://. It seems that the svn command line client would ask me the
credential and stores it to my home directory(with proper access right
bits). However, the password is still stored naked.
In this form, I believe it should ask first.
-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.4.31-pre2-xbox-chimpanzee-vs-ll
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages subversion depends on:
ii db4.2-util 4.2.52-18 Berkeley v4.2 Database Utilities
ii libapr0 2.0.54-4 the Apache Portable Runtime
ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an
ii libdb4.2 4.2.52-18 Berkeley v4.2 Database Libraries [
ii libexpat1 1.95.8-3 XML parsing C library - runtime li
ii libldap2 2.1.30-8 OpenLDAP libraries
ii libneon24 0.24.7.dfsg-2 An HTTP and WebDAV client library
ii libssl0.9.7 0.9.7e-3 SSL shared libraries
ii libsvn0 1.1.4-2 shared libraries used by Subversio
ii libxml2 2.6.16-7 GNOME XML library
ii patch 2.5.9-2 Apply a diff file to an original
ii zlib1g 1:1.2.2-4 compression library - runtime
-- no debconf information
--- End Message ---
--- Begin Message ---
Version: 1.6.0dfsg-1
On Tue, Dec 22, 2015 at 06:17:56AM +0000, Daniel Shahaf wrote:
> I believe this request was implemented:
>
> https://subversion.apache.org/docs/release-notes/1.6#auth-related-improvements-plaintext-passwords
>
> Also relevant to the issue of plaintext passwords is:
> https://subversion.apache.org/docs/release-notes/1.8#gpg-agent
Thanks for the follow up. Those do indeed seem to address the reported
issue. I'll close it against the 1.6 release.
Cheers,
--
James
GPG Key: 4096R/331BA3DB 2011-12-05 James McCoy <[email protected]>
--- End Message ---