Project

General

Profile

Linux » History » Version 10

Marc Mengel, 11/06/2013 12:11 PM

1 1 Marc Mengel
h1. Linux
2 1 Marc Mengel
3 1 Marc Mengel
There are numerous graphical front ends to the various packages on Windows; regardless which
4 1 Marc Mengel
front-end you choose, you will need to configure the back-end part below.
5 1 Marc Mengel
6 1 Marc Mengel
h2. Front ends
7 1 Marc Mengel
8 1 Marc Mengel
* http://www.tortoisecvs.org/
9 1 Marc Mengel
* http://code.google.com/p/tortoisegit/
10 1 Marc Mengel
* http://tortoisesvn.tigris.org/
11 1 Marc Mengel
* http://www.eclipse.org/
12 4 Marc Mengel
* http://cola.tuxfamily.org/
13 1 Marc Mengel
14 1 Marc Mengel
h2. Back Ends
15 1 Marc Mengel
16 1 Marc Mengel
For write access to  repositories on cdcvs, I am currently recommending that users use a kerberized ssh, 
17 1 Marc Mengel
which comes stock with Fermi Linux, or has to be installed on some older Linuxes.
18 1 Marc Mengel
19 1 Marc Mengel
I recommend for your $HOME/.ssh/config:
20 10 Marc Mengel
<pre>
21 1 Marc Mengel
  host *.fnal.gov
22 1 Marc Mengel
   GSSAPIAuthentication yes
23 1 Marc Mengel
   GSSAPIDelegateCredentials yes
24 1 Marc Mengel
  host cdcvs.fnal.gov
25 1 Marc Mengel
   ForwardX11 = no
26 2 Marc Mengel
   # ForwardAgent = yes # only if you're using ssh keys, and not kerberos
27 1 Marc Mengel
   GSSAPIAuthentication yes
28 1 Marc Mengel
   GSSAPIDelegateCredentials yes
29 10 Marc Mengel
</pre>
30 1 Marc Mengel
And on some newer systems
31 10 Marc Mengel
<pre>
32 9 Marc Mengel
   GSSAPITrustDNS yes
33 10 Marc Mengel
</pre>
34 6 Marc Mengel
Also, make sure your kerberos tickets are forwardable:
35 6 Marc Mengel
36 7 Marc Mengel
<pre>
37 6 Marc Mengel
  $ klist -f
38 6 Marc Mengel
  Ticket cache: FILE:/tmp/krb5cc_1733_m02jhk
39 6 Marc Mengel
  Default principal: mengel@FNAL.GOV
40 6 Marc Mengel
  
41 6 Marc Mengel
  Valid starting     Expires            Service principal
42 6 Marc Mengel
  06/10/11 09:51:47  06/11/11 11:51:46  krbtgt/FNAL.GOV@FNAL.GOV
43 6 Marc Mengel
	renew until 06/17/11 09:51:46, Flags: FRIA
44 7 Marc Mengel
</pre>
45 1 Marc Mengel
46 7 Marc Mengel
Note the "F" in the Flags: section.  If that isn't happening, check your 
47 7 Marc Mengel
/etc/krb5.conf under libdefaults and appdefaults:
48 1 Marc Mengel
49 7 Marc Mengel
<pre>
50 7 Marc Mengel
[libdefaults]
51 7 Marc Mengel
        ...
52 7 Marc Mengel
        forward = true
53 7 Marc Mengel
        forwardable = true
54 7 Marc Mengel
...
55 7 Marc Mengel
[appdefaults]
56 7 Marc Mengel
        kinit = {
57 7 Marc Mengel
                forwardable = true
58 7 Marc Mengel
                 ...
59 7 Marc Mengel
        
60 7 Marc Mengel
      pam = {
61 7 Marc Mengel
                debug = false
62 7 Marc Mengel
                forwardable = true
63 7 Marc Mengel
  
64 7 Marc Mengel
</pre>
65 8 Marc Mengel
66 8 Marc Mengel
67 1 Marc Mengel
h2. Check if it works:
68 1 Marc Mengel
69 1 Marc Mengel
try to login on the server with  ssh:
70 1 Marc Mengel
71 1 Marc Mengel
   ssh p-project@cdcvs.fnal.gov echo hi
72 1 Marc Mengel
73 5 Marc Mengel
(where "project" is your project name). You should get 
74 1 Marc Mengel
75 1 Marc Mengel
   Only 'lscvs' and 'cvs' commands are allowed
76 1 Marc Mengel
77 1 Marc Mengel
h2. CVS
78 1 Marc Mengel
79 1 Marc Mengel
Set CVS_RSH to /usr/bin/ssh in your environment.
80 1 Marc Mengel
81 1 Marc Mengel
    export CVS_RSH=/usr/bin/ssh
82 1 Marc Mengel
83 3 Marc Mengel
or for tcsh/csh
84 1 Marc Mengel
85 1 Marc Mengel
    setenv CVS_RSH /usr/bin/ssh
86 1 Marc Mengel
 
87 1 Marc Mengel
h2. Subversion
88 1 Marc Mengel
89 1 Marc Mengel
Subversion just uses ssh automagically.
90 1 Marc Mengel
91 1 Marc Mengel
h3. Git
92 1 Marc Mengel
93 1 Marc Mengel
Git just uses ssh automagically.