From owner-freebsd-hackers  Tue Sep 16 23:09:14 1997
Return-Path: <owner-freebsd-hackers>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id XAA19674
          for hackers-outgoing; Tue, 16 Sep 1997 23:09:14 -0700 (PDT)
Received: from scanner.worldgate.com (scanner.worldgate.com [198.161.84.3])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id XAA19669
          for <hackers@FreeBSD.ORG>; Tue, 16 Sep 1997 23:09:12 -0700 (PDT)
Received: from znep.com (uucp@localhost)
	by scanner.worldgate.com (8.8.7/8.8.7) with UUCP id AAA17288;
	Wed, 17 Sep 1997 00:07:15 -0600 (MDT)
Received: from localhost (marcs@localhost) by alive.znep.com (8.7.5/8.7.3) with SMTP id AAA07251; Wed, 17 Sep 1997 00:09:22 -0600 (MDT)
Date: Wed, 17 Sep 1997 00:09:22 -0600 (MDT)
From: Marc Slemko <marcs@znep.com>
To: itojun@itojun.org
cc: hackers@FreeBSD.ORG
Subject: Re: cvs pserver mode
In-Reply-To: <18005.874469962@itojun.csl.sony.co.jp>
Message-ID: <Pine.BSF.3.95.970916235732.6754A-100000@alive.znep.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-hackers@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

First, don't use pserver.  It sucks.  Badly.  It stores unencrypted
passwords on the clients disk and anyone with a shell on the server an
steal connections (and hence passwords) from users connecting.  Bad.

Secondly, you need the --allow-root option to tell it what repositories to
use.  This is new in 1.9.10 or something like that.

On Wed, 17 Sep 1997 itojun@itojun.org wrote:

> 	does any of you have trouble using pserver mode of cvs?
> 
> 	I got cvs 1.19.10 on /usr/bin/cvs (got from FreeBSD-current)
> 	and every time I use login command, cvs bails out with "incorrect
> 	password" message.
> 	I've tried my UNIX password and cvs password (by making
> 	CVSROOT/password), and $CVSROOT with "localhost" and canonical
> 	hostname, but they do not seem to change the behavior.
> 
> >% cvs -d :pserver:itojun@localhost:/export/somewhere/cvsroot login
> >(Logging in to itojun@localhost)
> >CVS password: 
> >cvs [login aborted]: incorrect password
> 
> 	inetd.conf is as follows:
> >cvspserver stream tcp   nowait  root    /usr/bin/cvs    cvs -b /usr/bin pserver
> 
> 	If anybody have some clue for this, please drop me a note.  Thanks!
> 
> itojun
>