Re: passwd file stores plain text passwords - how to protect it

2023-08-22 Thread Daniel Sahlberg
Den tis 22 aug. 2023 kl 17:53 skrev Bo Berglund : > On Tue, 22 Aug 2023 17:38:12 +0200, Bo Berglund > wrote: > > >On Tue, 22 Aug 2023 13:14:25 +0200, Daniel Sahlberg > > wrote: > > > >>Please note that for Subversion 1.12 until 1.14 the default was to > disable > >>the plaintext password cache. I

Re: passwd file stores plain text passwords - how to protect it

2023-08-22 Thread Bo Berglund
On Tue, 22 Aug 2023 17:38:12 +0200, Bo Berglund wrote: >On Tue, 22 Aug 2023 13:14:25 +0200, Daniel Sahlberg > wrote: > >>Please note that for Subversion 1.12 until 1.14 the default was to disable >>the plaintext password cache. In Subversion 1.15 the plaintext password >>cache will again be enabl

Re: passwd file stores plain text passwords - how to protect it

2023-08-22 Thread Bo Berglund
On Tue, 22 Aug 2023 13:14:25 +0200, Daniel Sahlberg wrote: >Please note that for Subversion 1.12 until 1.14 the default was to disable >the plaintext password cache. In Subversion 1.15 the plaintext password >cache will again be enabled by default. I am using svn a lot on raspberry pi devices an

Re: Subversion sasl authentication fails with openssl3.1

2023-08-22 Thread Daniel Sahlberg
Den sön 20 aug. 2023 kl 17:14 skrev Fischer, Michael < michael.fisc...@yale.edu>: > I have many repositories configured for sasl authentication. The svn > client for Mac osx, built using MacPorts, recently stopped working. I > first reported the problem to the MacPorts bug list but have been adv

Re: “passwd” file stores plain text passwords - how to protect it

2023-08-22 Thread Daniel Sahlberg
Den tis 22 aug. 2023 kl 13:00 skrev Channakeshavala, Sriharsha via users < users@subversion.apache.org>: > Hello, > > > > Since the “passwd” file stores plain text passwords, it is vulnerable for > the SVN users. > > We have not compiled the subversion 1.14.2 with “cyrus SASL” library and > hence

“passwd” file stores plain text passwords - how to protect it

2023-08-22 Thread Channakeshavala, Sriharsha via users
Hello, Since the “passwd” file stores plain text passwords, it is vulnerable for the SVN users. We have not compiled the subversion 1.14.2 with “cyrus SASL” library and hence cannot use SASL authentication mechanisms. Could you please suggest any other alternative to secure the passwd file ? T