Re: using svn cli with --non-interactive (in scripts) securely,withoutexposing password

2021-02-23 Thread Yasuhito FUTATSUKI
In article <210223145640.m0173...@mkii.yf.bsdclub.org> futat...@yf.bsdclub.org writes: > In article > > nka...@gmail.com writes: > > Tools that can > > write to a source control without anyone unlocking the key are quite > > dangerous. >

A more permanent home for the add-a-password-to-a-cached-username script? (was: Re: using svn cli with --non-interactive (in scripts) securely, without exposing password)

2021-02-23 Thread Daniel Shahaf
Nathan Hartman wrote on Mon, Feb 22, 2021 at 14:36:58 -0500: > In a recent discussion on our dev mailing list, there is an example > shell script (for zsh) that saves a password file. See [2] and note > that there were a few corrections to the script so be sure to use the > latest version in that m

Re: A more permanent home for the add-a-password-to-a-cached-username script? (was: Re: using svn cli with --non-interactive (in scripts) securely, without exposing password)

2021-02-23 Thread Nathan Hartman
On Tue, Feb 23, 2021 at 8:35 AM Daniel Shahaf wrote: > Nathan Hartman wrote on Mon, Feb 22, 2021 at 14:36:58 -0500: > > In a recent discussion on our dev mailing list, there is an example > > shell script (for zsh) that saves a password file. See [2] and note > > that there were a few corrections

Re: A more permanent home for the add-a-password-to-a-cached-username script? (was: Re: using svn cli with --non-interactive (in scripts) securely, without exposing password)

2021-02-23 Thread Daniel Sahlberg
Den tis 23 feb. 2021 16:40Nathan Hartman skrev: > On Tue, Feb 23, 2021 at 8:35 AM Daniel Shahaf > wrote: > >> Nathan Hartman wrote on Mon, Feb 22, 2021 at 14:36:58 -0500: >> > In a recent discussion on our dev mailing list, there is an example >> > shell script (for zsh) that saves a password fi

Re: A more permanent home for the add-a-password-to-a-cached-username script? (was: Re: using svn cli with --non-interactive (in scripts) securely, without exposing password)

2021-02-23 Thread Daniel Shahaf
Daniel Sahlberg wrote on Tue, Feb 23, 2021 at 16:50:07 +0100: > Den tis 23 feb. 2021 16:40Nathan Hartman skrev: > > I think it's a good candidate for contrib (though it might be better > > to port it to portable Bourne shell first). > > > > Would a Python version be useful? Porting isa rewrite an

Re: A more permanent home for the add-a-password-to-a-cached-username script? (was: Re: using svn cli with --non-interactive (in scripts) securely, without exposing password)

2021-02-23 Thread Branko Čibej
On 23.02.2021 17:46, Daniel Shahaf wrote: If a cron job needs authentication, its credentials need to be stored somewhere, either in plaintext or in "as good as" plaintext. I think storing the passwords in unobfuscated plaintext was a deliberate decision, informed by CVS's design choices in this

Re: A more permanent home for the add-a-password-to-a-cached-username script? (was: Re: using svn cli with --non-interactive (in scripts) securely, without exposing password)

2021-02-23 Thread Nico Kadel-Garcia
On Tue, Feb 23, 2021 at 3:15 PM Branko Čibej wrote: > > On 23.02.2021 17:46, Daniel Shahaf wrote: > > If a cron job needs authentication, its credentials need to be stored > > somewhere, either in plaintext or in "as good as" plaintext. I think > > storing the passwords in unobfuscated plaintext