Re: Enlarging the question Was: Re: Does pclcvs support ssh protocol ?

[Thierry Volpiatto]

Pierre Lorenzon <devel@pollock-nageoire.net> writes:

> From: Mike Mattie <codermattie@gmail.com>
> Subject: Re: Does pclcvs support ssh protocol ?
> Date: Thu, 21 Feb 2008 23:11:56 -0800
>
>> On Fri, 22 Feb 2008 07:54:09 +0100 (CET)
>> Pierre Lorenzon <devel@pollock-nageoire.net> wrote:
>> 
>> > From: Michael Hoffman <b3i4old02@sneakemail.com>
>> > Subject: Re: Does pclcvs support ssh protocol ?
>> > Date: Thu, 21 Feb 2008 20:31:54 +0000
>> > 
>> > > Pierre Lorenzon wrote:
>> > > 
>> > > >   Notice that I still do not have the answer to my question :
>> > > >   "yes or not is this password transaction implemented in
>> > > >   pcl-cvs like in tramp ?"
>> > > 
>> > > Now the question has changed.
>> > 
>> > 
>> >   Not really ! 
>> > 
>> >   Pierre
>> > 
>> > 
>> > 
>> 
>> The answer is clearly ssh-agent. There are a large number of security issues 
>> regarding keys,
>> memory locking, timed expiration, secure entry, etc. Emacs doesn't need to 
>> jump through all these
>> hoops when ssh-agent,pin-entry,gpg do this sort of thing
>> correctly with a robust code-base.
>
>   Yes ! do you mean that tramp for instance uses ssh-agent ? It
>   might be ; I didn't examine the code to answer this question
>   ...

Yes tramp use ssh-agent, if ssh-agent is started; if not you are prompted for a
passphrase (you have to create keys and use keys system, not password).
I don't use cvs for my files, i use svn.
With svn if you do your checkout throught ssh, and ssh-agent+keys system is
enabled, when you commit the change in your file, svn use automaticly ssh with
tramp.
So you have to do your initial co with ssh.
I suppose it is the same with cvs ?
Anyway, using ssh with keys and ssh-agent is the best for all (cvs, svn, or
anything else)
One thing you can do also is using sshfs:
You can mount the file system where your cvs repo is and then commit locally 
your
changes.(thought not all server autorize that)

-- 
A + Thierry
Pub key: http://pgp.mit.edu