Re: cvs ext (ssh), but no shell access.. (no6@pobox.com)

2003-09-25 Thread Mark D. Baushke
Wim Bertels <[EMAIL PROTECTED]> writes: > for now this what i did: > > for example: > 1. SSH > if u put > test: ... :/var/lib/cvs:usr/bin/cvs Assuming you meant to put /usr/bin/cvs in the passwd file, this is not good as it needs the 'server' command-line argument rather than whatever arguments

Re: cvs ext (ssh), but no shell access.. (no6@pobox.com)

2003-09-25 Thread Wim Bertels
> There are three basic mechanisms you may use: > > a) $HOME/.ssh/authorized_keys may contain the following option: > > command="command" > Specifies that the command is executed whenever this key is used > for authentication. The command supplied by the user (if any

Re: cvs ext (ssh), but no shell access..

2003-09-25 Thread JacobRhoden
On Fri, 26 Sep 2003 02:57 am, Rob Helmer wrote: > 1) permanently delete files under CVS control > 2) run arbitrary commands (including commands they upload) > 1 is bad enough, but 2 could allow them (or someone with access to their > account) to use the server for any manner of attack on other ser

Re: cvs ext (ssh), but no shell access..

2003-09-25 Thread Rob Helmer
On Wed, Sep 24, 2003 at 04:56:19PM -0700, Mike Castle wrote: > In article <[EMAIL PROTECTED]>, > Wim Bertels <[EMAIL PROTECTED]> wrote: > >Houdi, > >Its a remote clients/server setup, > >cvs is up and running, but by using the ext method users automatically gain > >shell access to the cvs server,

Re: cvs ext (ssh), but no shell access..

2003-09-25 Thread Larry Jones
[EMAIL PROTECTED] writes: > > What sshd option are you refering to? I looked in the docs, and could > not find such a configuration parameter. I would expect this man page > is for the latest sshd, 3.7p1, or later. See the "command=" option in the AUTHORIZED_KEYS file. -Larry Jones The game'

Re: connecting to cvs using wincvs

2003-09-25 Thread Larry Jones
Walther The Writer writes: > > I can't connect to remote server. What's the right settings for wincvs, > I can't use linux now. Instruction from the cvs site: > > download and install CVS. > export CVSROOT=:pserver:[EMAIL PROTECTED]:/cvsroot > cvs login > When asked for a password, just press ent

Re: CVS Client on Mac OS 9.1 & CVS Server on Linux 9.1...

2003-09-25 Thread Mark D. Baushke
<[EMAIL PROTECTED]> writes: > Dear All, > We have installed CVS Server on Linux 9.1 and would like to have > the CVS Client on Macintosh OS 9.1 client. > But as you know Mac OS 9 has two streams for each file viz. > resource fork & data fork. > > Please let me know where exactly

Re: cvs ext (ssh), but no shell access..

2003-09-25 Thread Mark D. Baushke
[EMAIL PROTECTED] writes: > Larry Jones wrote: > > > > Wim Bertels writes: > > > > > > cvs is up and running, but by using the ext method users > > > automatically gain shell access to the cvs server, this in NOT > > > intended, how do you solve this. > > > > You can configure sshd to only allow

CVS Client on Mac OS 9.1 & CVS Server on Linux 9.1...

2003-09-25 Thread GopiKrishna_Chebiyyam
Dear All, We have installed CVS Server on Linux 9.1 and would like to have the CVS Client on Macintosh OS 9.1 client. But as you know Mac OS 9 has two streams for each file viz. resource fork & data fork. Please let me know where exactly I can find the CVS Client for Mac OS

Re: cvs ext (ssh), but no shell access..

2003-09-25 Thread no6
Larry Jones wrote: > > Wim Bertels writes: > > > > cvs is up and running, but by using the ext method users automatically gain > > shell access to the cvs server, this in NOT intended, how do you solve this. > > You can configure sshd to only allow certain commands -- see the sshd > documentation