On Wed, Mar 23, 2011 at 11:04 AM, Stefan Sperling <s...@elego.de> wrote: > On Wed, Mar 23, 2011 at 02:47:46PM +0100, Cecil Westerhof wrote: >> As I understand it the caching or not is done through setting: >> ${HOME}/.subversion/servers >> >> Is it possible to do this centrally? > > Put this in /etc/subversion/servers: > > [global] > store-plaintext-passwords=no
I'm looking for documentation on this. I don't see it *anywhere*, except a few comments in the source code for libsvn_subr/config_file.c, not in the manual pages nor in the "redbook". Moreover, this only works on a single client host basis, it won't work if the subversion is installed locally with a distinct "./configure --sysconfdir=/etc" setting, it can be overridden in the individual user's $HOME/.subversionn/servers file, etc., etc. It's not a reliable approach. If you want to be sure of clients not storing passwords with Subversion, you pretty much can't use password based access techniques.