Linux » History » Version 7

Version 6 (Marc Mengel, 06/10/2011 10:00 AM) → Version 7/10 (Marc Mengel, 06/10/2011 10:03 AM)

h1. Linux

There are numerous graphical front ends to the various packages on Windows; regardless which
front-end you choose, you will need to configure the back-end part below.

h2. Front ends


h2. Back Ends

For write access to repositories on cdcvs, I am currently recommending that users use a kerberized ssh,
which comes stock with Fermi Linux, or has to be installed on some older Linuxes.

I recommend for your $HOME/.ssh/config:

host *
GSSAPIAuthentication yes
GSSAPIDelegateCredentials yes
ForwardX11 = no
# ForwardAgent = yes # only if you're using ssh keys, and not kerberos
GSSAPIAuthentication yes
GSSAPIDelegateCredentials yes

Also, make sure your kerberos tickets are forwardable:


$ klist -f
Ticket cache: FILE:/tmp/krb5cc_1733_m02jhk
Default principal: mengel@FNAL.GOV

Valid starting Expires Service principal
06/10/11 09:51:47 06/11/11 11:51:46 krbtgt/FNAL.GOV@FNAL.GOV
renew until 06/17/11 09:51:46, Flags: FRIA

Note the "F" in the Flags: section. If that isn't happening, check your
/etc/krb5.conf under libdefaults and appdefaults:

forward = true
forwardable = true
kinit = {
forwardable = true

pam = {
debug = false
forwardable = true


h2. Check if it works:

try to login on the server with ssh:

ssh echo hi

(where "project" is your project name). You should get

Only 'lscvs' and 'cvs' commands are allowed

h2. CVS

Set CVS_RSH to /usr/bin/ssh in your environment.

export CVS_RSH=/usr/bin/ssh

or for tcsh/csh

setenv CVS_RSH /usr/bin/ssh

h2. Subversion

Subversion just uses ssh automagically.

h3. Git

Git just uses ssh automagically.