[ Please help debug these instructions! Send comments/corrections! ]

There are numerous graphical front ends to the various packages on Windows; regardless which
front-end you choose, you will need to configure the back-end part below.

Front ends

Back Ends

For write access to repositories on cdcvs, I am currently recommending that users use Putty 0.62 (or newer)
in concert witht NetIDManager and Keberos for Windows.

Then there are a few steps to get things setup:

  1. Install the appropriate Putty installer (either 32 or 64 bit, at the bottom of this page).
    To find out if your computer is running 32-bit or 64-bit Windows, do the following:
    • Open System by clicking the Start button, clicking Control Panel, clicking System and Maintenance, and then clicking System.
    • Under System, you can view the system type.
  2. Startup PuTTY from that installation
  3. Select Session and set the hostname to:
  4. Expand SSH and under that expand Auth, and select GSSAPI
    • Check the box labelled: Allow GSSAPI credential delegation
    • Ensure that MIT Kerberos GSSAPI is first in the Preference order for GSSAPI libraries" box.
  5. Select Session again. In the empty Saved Sessions box, enter and click Save.
  6. Create some environment variables:
    1. (system) CVS_RSH = C:\PROGRA~1\PuTTY\plink.exe
    2. (system) GIT_SSH = C:\PROGRA~1\PuTTY\plink.exe
    3. (system) SVN_SSH = C:\PROGRA~1\PuTTY\plink.exe
      • Right-click My Computer, and then click Properties.
      • Click the Advanced tab.
      • Click Environment variables.
      • Click one the following options, for either a user or a system variable:
        • Click New to add a new variable name and value.
        • Click an existing variable, and then click Edit to change its name or value.
        • Click an existing variable, and then click Delete to remove it.
  7. Close all open windows then renew your the credentials for .

Note that if you were previously using the old KCA bundle setup, you should probably
also remove the environment variable setting for KRB5_CONFIG.

Check if it works:

try to login on the server with plink.exe. In a cmd.exe window:

  %CVS_RSH% echo hi

(where "" is from your repository path (CVSROOT or svn+ssh: or ssh: path for Git) ). You should get
   Only 'lscvs' and 'cvs' commands are allowed 


if you're a project admin.) If it's the first time you've connected to this host,
you'll also get:

The server's host key is not cached in the registry. You
have no guarantee that the server is the computer you
think it is.
The server's rsa2 key fingerprint is:
ssh-rsa 1024 01:30:15:c1:ab:4a:41:c3:62:e2:46:35:71:2e:c7:64
If you trust this host, enter "y" to add the key to
PuTTY's cache and carry on connecting.
If you want to carry on connecting just once, without
adding the key to the cache, enter "n".
If you do not trust this host, press Return to abandon the
Store key in cache? (y/n)

Please answer 'y' for yes.


The CVS_RSH environment variable should make :ext: CVSROOT's work in WinCVS, TortiseCVS, etc.


The GIT_SSH environment variable should make ssh:/... repository paths work with Git tools.

The only exception known at the moment is Eclipse's Git backend, which ignores GIT_SSH. If you're using Git from Eclipse, we can setup ssh public key access for you. We also have a bug report in with the Eclipse Git backend asking that they fix this.


Configure Subversion to use plink/ssh for “svn+ssh” uri.

  • Edit the file c:\Documents and Settings\user\Application Data\Subversion\config
    (with your username for "user") * Locate the section named [tunnels] * Add the following line :

Related files