CVS in transition to SVN @ jackaudio.org

please avoid commits until i send another message announcing
that the
transition is done. and then avoid commits until you have
checked out
the new code from SVN (details to follow). access to CVS
will be
shutdown as best I can after the transition is complete. it
may take a
while, however - the actual import is slow, and i then need
to deal with
enabling ssh access for all concerned.

--p




-------------------------------------------------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Jackit-devel mailing list
Jackit-devellists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jackit-dev
el

Paul Davis wrote:
> please avoid commits until i send another message
announcing that the
> transition is done. and then avoid commits until you
have checked out
> the new code from SVN (details to follow). access to
CVS will be
> shutdown as best I can after the transition is
complete. it may take a
> while, however - the actual import is slow, and i then
need to deal with
> enabling ssh access for all concerned.
> 
Maybe it's not a very good idea to disable CVS so fast.

I had some uncommitted changes that date from before your
"jack week". 
Those are pretty uncool without a cvs update before the cvs
diff to 
patch the fresh svn (still with me?).

I've updated my cvs tree to 0.102.1 so I guess that's not
a problem for 
me anymore, but there are plenty of jackd devels.

Pieter


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Jackit-devel mailing list
Jackit-devellists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jackit-dev
el

This message is targetted only at those people who already
have write
access to the SF CVS JACK repository, which includes, using
their SF net
IDs:

paul
trutkin
joq 
adnans
cyonut
essej
kaiv
letz
node
pieterpalmers 
richi
rlrevell
rncbc
sonarnerd
theno23
wingo

You will need to send me an SSH public key for use with the
new
subversion repository, after which you will be able to
access the
current dummy repository as:

	svn+ssh://jacksvnjackaudio.org/

You can choose to use your normal public key or if that is
troublesome
to you, create a new private/public keypair and use
~/.ssh/config to
specify the use of this keypair when authenticating as
jacksvnjackaudio.org. http://ardour.org/dow
nload_full has details on
how to do this in a slightly different context. you're all
smart guys, i
know you'll figure it out.

the only risk of giving me your public key is that anyone
who knows it
could spoof being you on any SVN+ssh setup on which you use
the same
public key. i will leave you to assess the risk of that for
yourself,
with the obvious promises that:

	a) i would never ever do that
	b) ~jacksvn/.ssh is chmod 700
	c) ~jacksvn/.ssh/authorized_keys is chmod 600

if you not have a public key yet, use ssh-keygen to create
one and then
send me the id_dsa.pub file that it generates.

the benefit of this system is that there is only shell
account created
to provide write access to the repository which dramatically
reduces
potential security and audit issues compared to giving
everyone their
own shell account. 

note that anonymous access to the repository does not
require any of
this stuff, of course.

--p





-------------------------------------------------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Jackit-devel mailing list
Jackit-devellists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jackit-dev
el

On 5/15/06, Paul Davis <paullinuxaudiosystems.com>
wrote:
> This message is targetted only at those people who
already have write
> access to the SF CVS JACK repository, which includes,
using their SF net
> IDs:
>
> paul
> trutkin
> joq
> adnans
> cyonut
> essej
> kaiv
> letz
> node
> pieterpalmers
> richi
> rlrevell
> rncbc
> sonarnerd
> theno23
> wingo
>
> You will need to send me an SSH public key for use with
the new
> subversion repository, after which you will be able to
access the
> current dummy repository as:
>
>         svn+ssh://jacksvnjackaudio.org/
>
> You can choose to use your normal public key or if that
is troublesome
> to you, create a new private/public keypair and use
~/.ssh/config to
> specify the use of this keypair when authenticating as
> jacksvnjackaudio.org. http://ardour.org/dow
nload_full has details on
> how to do this in a slightly different context. you're
all smart guys, i
> know you'll figure it out.
>
> the only risk of giving me your public key is that
anyone who knows it
> could spoof being you on any SVN+ssh setup on which you
use the same
> public key. i will leave you to assess the risk of that
for yourself,
> with the obvious promises that:
>
>         a) i would never ever do that
>         b) ~jacksvn/.ssh is chmod 700
>         c) ~jacksvn/.ssh/authorized_keys is chmod 600
>
> if you not have a public key yet, use ssh-keygen to
create one and then
> send me the id_dsa.pub file that it generates.
>
> the benefit of this system is that there is only shell
account created
> to provide write access to the repository which
dramatically reduces
> potential security and audit issues compared to giving
everyone their
> own shell account.
>
> note that anonymous access to the repository does not
require any of
> this stuff, of course.

Is there only *one* shell account?

If so, how will we know who committed what?
-- 
 joq


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http:
//sel.as-us.falkag.net/sel?cmd=lnk&kid0709&bid&
amp;3057&dat1642
_______________________________________________
Jackit-devel mailing list
Jackit-devellists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jackit-dev
el

On Wed, 2006-05-17 at 16:33 -0500, Jack O'Quin wrote:
> Is there only *one* shell account?
> 
> If so, how will we know who committed what?

the magic of SVN:

command="/usr/bin/svnserve -t -r $SOMEDIR
--tunnel-user=joq",no-port-
forwarding,no-agent-forwarding,no-X11-forwarding,no-pty ssh-
dss .........

svnserve does all its operations as user "joq"
when the presented public
key matches yours.

--p




-------------------------------------------------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Jackit-devel mailing list
Jackit-devellists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jackit-dev
el