Project

General

Profile

Linux » History » Version 9

Marc Mengel, 11/06/2013 12:10 PM

1 1 Marc Mengel
h1. Linux
2 1 Marc Mengel
3 1 Marc Mengel
There are numerous graphical front ends to the various packages on Windows; regardless which
4 1 Marc Mengel
front-end you choose, you will need to configure the back-end part below.
5 1 Marc Mengel
6 1 Marc Mengel
h2. Front ends
7 1 Marc Mengel
8 1 Marc Mengel
* http://www.tortoisecvs.org/
9 1 Marc Mengel
* http://code.google.com/p/tortoisegit/
10 1 Marc Mengel
* http://tortoisesvn.tigris.org/
11 1 Marc Mengel
* http://www.eclipse.org/
12 4 Marc Mengel
* http://cola.tuxfamily.org/
13 1 Marc Mengel
14 1 Marc Mengel
h2. Back Ends
15 1 Marc Mengel
16 1 Marc Mengel
For write access to  repositories on cdcvs, I am currently recommending that users use a kerberized ssh, 
17 1 Marc Mengel
which comes stock with Fermi Linux, or has to be installed on some older Linuxes.
18 1 Marc Mengel
19 1 Marc Mengel
I recommend for your $HOME/.ssh/config:
20 1 Marc Mengel
21 1 Marc Mengel
  host *.fnal.gov
22 1 Marc Mengel
   GSSAPIAuthentication yes
23 1 Marc Mengel
   GSSAPIDelegateCredentials yes
24 1 Marc Mengel
  host cdcvs.fnal.gov
25 1 Marc Mengel
   ForwardX11 = no
26 2 Marc Mengel
   # ForwardAgent = yes # only if you're using ssh keys, and not kerberos
27 1 Marc Mengel
   GSSAPIAuthentication yes
28 1 Marc Mengel
   GSSAPIDelegateCredentials yes
29 1 Marc Mengel
30 9 Marc Mengel
And on some newer systems
31 9 Marc Mengel
   GSSAPITrustDNS yes
32 9 Marc Mengel
33 6 Marc Mengel
Also, make sure your kerberos tickets are forwardable:
34 6 Marc Mengel
35 7 Marc Mengel
<pre>
36 6 Marc Mengel
  $ klist -f
37 6 Marc Mengel
  Ticket cache: FILE:/tmp/krb5cc_1733_m02jhk
38 6 Marc Mengel
  Default principal: mengel@FNAL.GOV
39 6 Marc Mengel
  
40 6 Marc Mengel
  Valid starting     Expires            Service principal
41 6 Marc Mengel
  06/10/11 09:51:47  06/11/11 11:51:46  krbtgt/FNAL.GOV@FNAL.GOV
42 6 Marc Mengel
	renew until 06/17/11 09:51:46, Flags: FRIA
43 7 Marc Mengel
</pre>
44 1 Marc Mengel
45 7 Marc Mengel
Note the "F" in the Flags: section.  If that isn't happening, check your 
46 7 Marc Mengel
/etc/krb5.conf under libdefaults and appdefaults:
47 1 Marc Mengel
48 7 Marc Mengel
<pre>
49 7 Marc Mengel
[libdefaults]
50 7 Marc Mengel
        ...
51 7 Marc Mengel
        forward = true
52 7 Marc Mengel
        forwardable = true
53 7 Marc Mengel
...
54 7 Marc Mengel
[appdefaults]
55 7 Marc Mengel
        kinit = {
56 7 Marc Mengel
                forwardable = true
57 7 Marc Mengel
                 ...
58 7 Marc Mengel
        
59 7 Marc Mengel
      pam = {
60 7 Marc Mengel
                debug = false
61 7 Marc Mengel
                forwardable = true
62 7 Marc Mengel
  
63 7 Marc Mengel
</pre>
64 8 Marc Mengel
65 8 Marc Mengel
66 1 Marc Mengel
h2. Check if it works:
67 1 Marc Mengel
68 1 Marc Mengel
try to login on the server with  ssh:
69 1 Marc Mengel
70 1 Marc Mengel
   ssh p-project@cdcvs.fnal.gov echo hi
71 1 Marc Mengel
72 5 Marc Mengel
(where "project" is your project name). You should get 
73 1 Marc Mengel
74 1 Marc Mengel
   Only 'lscvs' and 'cvs' commands are allowed
75 1 Marc Mengel
76 1 Marc Mengel
h2. CVS
77 1 Marc Mengel
78 1 Marc Mengel
Set CVS_RSH to /usr/bin/ssh in your environment.
79 1 Marc Mengel
80 1 Marc Mengel
    export CVS_RSH=/usr/bin/ssh
81 1 Marc Mengel
82 3 Marc Mengel
or for tcsh/csh
83 1 Marc Mengel
84 1 Marc Mengel
    setenv CVS_RSH /usr/bin/ssh
85 1 Marc Mengel
 
86 1 Marc Mengel
h2. Subversion
87 1 Marc Mengel
88 1 Marc Mengel
Subversion just uses ssh automagically.
89 1 Marc Mengel
90 1 Marc Mengel
h3. Git
91 1 Marc Mengel
92 1 Marc Mengel
Git just uses ssh automagically.