Fermi Redmine

h1. Linux

There are numerous graphical front ends to the various packages on Windows; regardless which

front-end you choose, you will need to configure the back-end part below.

h2. Front ends

* http://www.tortoisecvs.org/

* http://code.google.com/p/tortoisegit/

* http://tortoisesvn.tigris.org/

* http://www.eclipse.org/

* http://cola.tuxfamily.org/

h2. Back Ends

For write access to  repositories on cdcvs, I am currently recommending that users use a kerberized ssh, 

which comes stock with Fermi Linux, or has to be installed on some older Linuxes.

I recommend for your $HOME/.ssh/config:

<pre>

  host *.fnal.gov

   GSSAPIAuthentication yes

   GSSAPIDelegateCredentials yes

  host cdcvs.fnal.gov

   ForwardX11 = no

   # ForwardAgent = yes # only if you're using ssh keys, and not kerberos

   GSSAPIAuthentication yes

   GSSAPIDelegateCredentials yes

</pre>

And on some newer systems

<pre>

   GSSAPITrustDNS yes

</pre>

Also, make sure your kerberos tickets are forwardable:

<pre>

  $ klist -f

  Ticket cache: FILE:/tmp/krb5cc_1733_m02jhk

  Default principal: mengel@FNAL.GOV

  Valid starting     Expires            Service principal

  06/10/11 09:51:47  06/11/11 11:51:46  krbtgt/FNAL.GOV@FNAL.GOV

	renew until 06/17/11 09:51:46, Flags: FRIA

</pre>

Note the "F" in the Flags: section.  If that isn't happening, check your 

/etc/krb5.conf under libdefaults and appdefaults:

<pre>

[libdefaults]

        ...

        forward = true

        forwardable = true

...

[appdefaults]

        kinit = {

                forwardable = true

                 ...

      pam = {

                debug = false

                forwardable = true

</pre>

h2. Check if it works:

try to login on the server with  ssh:

   ssh p-project@cdcvs.fnal.gov echo hi

(where "project" is your project name). You should get 

   Only 'lscvs' and 'cvs' commands are allowed

h2. CVS

Set CVS_RSH to /usr/bin/ssh in your environment.

    export CVS_RSH=/usr/bin/ssh

or for tcsh/csh

    setenv CVS_RSH /usr/bin/ssh

h2. Subversion

Subversion just uses ssh automagically.

h3. Git

Git just uses ssh automagically.