Linux » History » Version 10
Marc Mengel, 11/06/2013 12:11 PM
1 | 1 | Marc Mengel | h1. Linux |
---|---|---|---|
2 | 1 | Marc Mengel | |
3 | 1 | Marc Mengel | There are numerous graphical front ends to the various packages on Windows; regardless which |
4 | 1 | Marc Mengel | front-end you choose, you will need to configure the back-end part below. |
5 | 1 | Marc Mengel | |
6 | 1 | Marc Mengel | h2. Front ends |
7 | 1 | Marc Mengel | |
8 | 1 | Marc Mengel | * http://www.tortoisecvs.org/ |
9 | 1 | Marc Mengel | * http://code.google.com/p/tortoisegit/ |
10 | 1 | Marc Mengel | * http://tortoisesvn.tigris.org/ |
11 | 1 | Marc Mengel | * http://www.eclipse.org/ |
12 | 4 | Marc Mengel | * http://cola.tuxfamily.org/ |
13 | 1 | Marc Mengel | |
14 | 1 | Marc Mengel | h2. Back Ends |
15 | 1 | Marc Mengel | |
16 | 1 | Marc Mengel | For write access to repositories on cdcvs, I am currently recommending that users use a kerberized ssh, |
17 | 1 | Marc Mengel | which comes stock with Fermi Linux, or has to be installed on some older Linuxes. |
18 | 1 | Marc Mengel | |
19 | 1 | Marc Mengel | I recommend for your $HOME/.ssh/config: |
20 | 10 | Marc Mengel | <pre> |
21 | 1 | Marc Mengel | host *.fnal.gov |
22 | 1 | Marc Mengel | GSSAPIAuthentication yes |
23 | 1 | Marc Mengel | GSSAPIDelegateCredentials yes |
24 | 1 | Marc Mengel | host cdcvs.fnal.gov |
25 | 1 | Marc Mengel | ForwardX11 = no |
26 | 2 | Marc Mengel | # ForwardAgent = yes # only if you're using ssh keys, and not kerberos |
27 | 1 | Marc Mengel | GSSAPIAuthentication yes |
28 | 1 | Marc Mengel | GSSAPIDelegateCredentials yes |
29 | 10 | Marc Mengel | </pre> |
30 | 1 | Marc Mengel | And on some newer systems |
31 | 10 | Marc Mengel | <pre> |
32 | 9 | Marc Mengel | GSSAPITrustDNS yes |
33 | 10 | Marc Mengel | </pre> |
34 | 6 | Marc Mengel | Also, make sure your kerberos tickets are forwardable: |
35 | 6 | Marc Mengel | |
36 | 7 | Marc Mengel | <pre> |
37 | 6 | Marc Mengel | $ klist -f |
38 | 6 | Marc Mengel | Ticket cache: FILE:/tmp/krb5cc_1733_m02jhk |
39 | 6 | Marc Mengel | Default principal: mengel@FNAL.GOV |
40 | 6 | Marc Mengel | |
41 | 6 | Marc Mengel | Valid starting Expires Service principal |
42 | 6 | Marc Mengel | 06/10/11 09:51:47 06/11/11 11:51:46 krbtgt/FNAL.GOV@FNAL.GOV |
43 | 6 | Marc Mengel | renew until 06/17/11 09:51:46, Flags: FRIA |
44 | 7 | Marc Mengel | </pre> |
45 | 1 | Marc Mengel | |
46 | 7 | Marc Mengel | Note the "F" in the Flags: section. If that isn't happening, check your |
47 | 7 | Marc Mengel | /etc/krb5.conf under libdefaults and appdefaults: |
48 | 1 | Marc Mengel | |
49 | 7 | Marc Mengel | <pre> |
50 | 7 | Marc Mengel | [libdefaults] |
51 | 7 | Marc Mengel | ... |
52 | 7 | Marc Mengel | forward = true |
53 | 7 | Marc Mengel | forwardable = true |
54 | 7 | Marc Mengel | ... |
55 | 7 | Marc Mengel | [appdefaults] |
56 | 7 | Marc Mengel | kinit = { |
57 | 7 | Marc Mengel | forwardable = true |
58 | 7 | Marc Mengel | ... |
59 | 7 | Marc Mengel | |
60 | 7 | Marc Mengel | pam = { |
61 | 7 | Marc Mengel | debug = false |
62 | 7 | Marc Mengel | forwardable = true |
63 | 7 | Marc Mengel | |
64 | 7 | Marc Mengel | </pre> |
65 | 8 | Marc Mengel | |
66 | 8 | Marc Mengel | |
67 | 1 | Marc Mengel | h2. Check if it works: |
68 | 1 | Marc Mengel | |
69 | 1 | Marc Mengel | try to login on the server with ssh: |
70 | 1 | Marc Mengel | |
71 | 1 | Marc Mengel | ssh p-project@cdcvs.fnal.gov echo hi |
72 | 1 | Marc Mengel | |
73 | 5 | Marc Mengel | (where "project" is your project name). You should get |
74 | 1 | Marc Mengel | |
75 | 1 | Marc Mengel | Only 'lscvs' and 'cvs' commands are allowed |
76 | 1 | Marc Mengel | |
77 | 1 | Marc Mengel | h2. CVS |
78 | 1 | Marc Mengel | |
79 | 1 | Marc Mengel | Set CVS_RSH to /usr/bin/ssh in your environment. |
80 | 1 | Marc Mengel | |
81 | 1 | Marc Mengel | export CVS_RSH=/usr/bin/ssh |
82 | 1 | Marc Mengel | |
83 | 3 | Marc Mengel | or for tcsh/csh |
84 | 1 | Marc Mengel | |
85 | 1 | Marc Mengel | setenv CVS_RSH /usr/bin/ssh |
86 | 1 | Marc Mengel | |
87 | 1 | Marc Mengel | h2. Subversion |
88 | 1 | Marc Mengel | |
89 | 1 | Marc Mengel | Subversion just uses ssh automagically. |
90 | 1 | Marc Mengel | |
91 | 1 | Marc Mengel | h3. Git |
92 | 1 | Marc Mengel | |
93 | 1 | Marc Mengel | Git just uses ssh automagically. |