[Logo] JCVSForum - Community Support For JCVS Users and Developers
  [Search] Search   [Recent Topics] Recent Topics   [Hottest Topics] Hottest Topics   [Members]  Member Listing   [Groups] Back to home page 
[Register] Register / 
[Login] Login 
Messages posted by: jcvslist
Forum Index » Profile for jcvslist » Messages posted by jcvslist
Author Message
<pre>Jeffrey,

J. Jeffrey Close wrote:
> I've been told by everyone I speak to that the pserver method of CVS is
> really a bad idea and not to use it. So the question is, does jCVS have
> another more secure method of connecting for remote clients?

The pserver method has it's place. It is not terribly secure, and had a
known security hole until recently. The main problem, though, is that
pserver sends passwords over the wire in cleartext.

If security is a real concern, there are a number of ways around the
issue:
*) through CVS:
*) You can use the kserver method for kerberos 4 auth and encryption
*) You can use the gserver method for GSS-API auth and encryption
*) through external systems:
*) some sort of VPN (MS PPTP, Aventail, etc.)
*) Kerberized rsh (remote shell)

In our environment, I am hoping to move to gserver. Unfortunately I
have been (as yet) unsuccessful in getting the server ported to run with
HP's DCE. Even then, I would probebly want to add GSS-API support to
jcvs (which is probably possible, but an onerus [SP?] task). On the
other hand, we are on an internal network, and pserver security is
currently acceptable for your environment.

Regards,
Neal

--
-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
- Neal A. Dillman * neald@rose.hp.com -
-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
- My opinions are. -
-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-

</pre>
<pre>At 11:01 AM 9/9/98 -0700, J. Jeffrey Close wrote:
>
>
>I've been told by everyone I speak to that the pserver method of CVS is
>really a bad idea and not to use it. So the question is, does jCVS have
>another more secure method of connecting for remote clients?
>
>cheers,
>jeffrey

I use the pserver method of connecting routinely and have had no problems.
In the office, the connection goes over the internal network, so security
is not a major issue.

From home, I use it over a secure connection. We support two in our lab --
Microsoft's Virtual Private Network (based on the PPTP protocol) and Data
Fellows F-SSH (i.e., the secure shell protocol). The first is for Windows
users, while the second is for Unix users.

Data Fellows's stuff (a Finnish company) is really, really secure.
Microsoft's choice of keys based on passwords may not be the very best, but
PPTP itself is secure enough to keep routine prying eyes from watching my
traffic. I use it for all my Windows work at home.

/Hugh Lauer

</pre>
<pre>

I've been told by everyone I speak to that the pserver method of CVS is
really a bad idea and not to use it. So the question is, does jCVS have
another more secure method of connecting for remote clients?

cheers,
jeffrey




At 05:56 PM 9/9/98 -0700, Neal A. Dillman wrote:
>Hi,
>
> I have used jCVS [at home] on OS/2 a few times, and have been quite
>impressed. I am hoping to use it at work as well. I have run into two
>problems:
>
>1) The color for the menus on the main window (as well as other places)
>is white on white when unselected. This makes it difficult (impossible
>actually) to read. The menus are somewhat readable when they are
>selected. I did not see an option in the code to change this.
>
>2) When I try to do a checkout I get:
>Exception occurred during event dispatching:
>java.lang.NullPointerException
> at java.util.GregorianCalendar.computeFields(Compiled Code)
> at java.util.Calendar.setTimeInMillis(Calendar.java)
> at java.util.Calendar.setTime(Calendar.java)
> at java.text.SimpleDateFormat.format(Compiled Code)
> at java.text.DateFormat.format(DateFormat.java)
> at
>com.ice.cvsc.CVSTimestampFormat.formatTimeZone(CVSTimestampFormat.java:109)
> at
>com.ice.cvsc.CVSTimestampFormat.format(CVSTimestampFormat.java:94)
> at com.ice.cvsc.CVSEntry.setTimestamp(CVSEntry.java:363)
> at com.ice.cvsc.CVSProject.processResponseItem(Compiled Code)
> at com.ice.cvsc.CVSProject.handleResponseItem(Compiled Code)
> at com.ice.cvsc.CVSClient.processResponseItem(Compiled Code)
> at com.ice.cvsc.CVSClient.readAndParseResponse(Compiled Code)
> at com.ice.cvsc.CVSClient.processCVSRequest(Compiled Code)
> at com.ice.cvsc.CVSProject.performCVSRequest(Compiled Code)
> at com.ice.jcvs.CVSProjectFrame.commonCVSCommand(Compiled Code)
> at com.ice.jcvs.CVSProjectFrame.performCheckOut(Compiled Code)
> at com.ice.jcvs.CVSCheckoutDialog.actionPerformed(Compiled Code)
> at java.awt.Button.processActionEvent(Compiled Code)
> at java.awt.Button.processEvent(Compiled Code)
> at java.awt.Component.dispatchEventImpl(Compiled Code)
> at java.awt.Component.dispatchEvent(Compiled Code)
> at java.awt.EventDispatchThread.run(Compiled Code)
>
>My platform is:
>HP-UX Java C.01.15.05 08/06/98
>HP-UX B.10.20 A 9000/712
>
>I am using pserver (not rsh/remsh).
>
>Has anyone go jcvs working properly on HP-UX?
>
>
> -Neal-
>
>--
>-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
>- Neal A. Dillman * neald@rose.hp.com -
>-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
>- My opinions are. -
>-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
>
>
--------------------------------------------------------------------
J. Jeffrey Close I've been having to use 'vi' again
France Telecom R&D lately, and I just want to say that
close@halcyon.com anyone that would use vi when they
206-545-9360 could use emacs is insane.
SPAM OF THE WEEK: GET MIGRAINE RELIEF AT http://www.simplesol.net


</pre>
<pre>Hi Doug,

> Hi All,
> I've been working with jCVS for a while now, testing it for our group.
> I've been having problems getting consistent results out of the binary
> wrap. When I import a set of directories into an empty repository and
> define a number of binary file types (i.e. *.gif *.jpg *.doc) then
> sometimes it will not properly bring in some of them. I.e. it would
> correctly bring in the jpegs, but the gif's would get buggered up. If
> I specifically import them one at a time under the MISC menu it seems
> to work, but that's a major hassle for a lot of file!

Sure is.

> Once I've got them in it seems to be consistent, but the initial
> import seems a bit hit and miss. Am I using the wrong format for
> multiple wildcard definitions? When I put them in the box separated
> by carriage returns it only correctly did the first, so then I tried
> separated with spaces and it took MOST of the definitions, but seemed
> to miss one.
>
> I'm hoping someone can point me to the proper format for defining
> multiple wildcard binaries for import.

I believe you are doing the right thing, since the spec uses whitespace to
separate file/globs ("\t\n\r"). So, it sounds like a bug. A trace would be
very helpful here. If you could go to the Main Window, File menu, Turn On
Tracing command. Then do the import, then email me the resulting 'cvslog.txt'
file. This would be very helpful.

tim.
Tim Endres, ICE Engineering, Inc.
mailto: time@ice.com http://www.ice.com
"Usenet - A slow moving self parody." -- Peter Honeyman

</pre>
<pre>
Hi All,

I've been working with jCVS for a while now, testing it for our group.
I've been having problems getting consistent results out of the binary
wrap. When I import a set of directories into an empty repository and
define a number of binary file types (i.e. *.gif *.jpg *.doc) then
sometimes it will not properly bring in some of them. I.e. it would
correctly bring in the jpegs, but the gif's would get buggered up. If
I specifically import them one at a time under the MISC menu it seems
to work, but that's a major hassle for a lot of file!

Once I've got them in it seems to be consistent, but the initial
import seems a bit hit and miss. Am I using the wrong format for
multiple wildcard definitions? When I put them in the box separated
by carriage returns it only correctly did the first, so then I tried
separated with spaces and it took MOST of the definitions, but seemed
to miss one.

I'm hoping someone can point me to the proper format for defining
multiple wildcard binaries for import.

Doug Merrett

__________________________________
Michelin Application Support Group

</pre>
<pre>> Hi there. I've been using jCVS for a while now and I really like it
> because it saves me a lot of time. I have a question about using the
> tag feature, and when I went to www.ice.com to sign up for the email
> mailing list, the link there
> http://www.gjt.org/cgi-bin/lwgate/lwgate/JCVS/subscribe.html was not
> working. So here I am.

Thank you for pointing this out. I had forgotten to update those pages
to point to the new mailing list servlet. I have taken the liberty of
adding you to the jCVS list. You may wish to subscribe to the announce
list.

> When I select a number of files in a project and go to the Selection,
> Tag Files menu, I get an error:
>
> CVS [server aborted]: tag '<the path & name of my first file>' must not
> contain the characters '$,.:;@' The command encountered an error.
>
> Am I misunderstanding the Tag Files menu selection? I can do tags
> without jcvs, but it is a real pain to keep going back and forth between
> jcvs & my DOS window for this sort of thing.

Are you typing the tag value into the text field at the top of the
project window? If you do not type this in, it will use the first
filename as the tag, which can cause problems.

tim.
Tim Endres, ICE Engineering, Inc.
mailto: time@ice.com http://www.ice.com
"Usenet - A slow moving self parody." -- Peter Honeyman

</pre>
<pre>> Is there a document that lists all of the properties that can be set in
> the properties.txt file? I have the file defaults.txt, Does it have a
> complete list in it?

The "defaults.txt" in the source directory (com.ice.jcvs) or in the JAR
file has a compelte listing. I intend to have an html document that
reflect the contents soon.

> What I am really trying to do is figure out what the pull down selection
> box and the Open button do in the first window that pops up. When I start
> jCVS the pull down is empty and the Open button does not do anything.
>
> I have searched through the docs directory and the web site. Is there an
> archive for the mailing list?

The pull down and open button work together. You select a projet in the
pull down and then open it by clicking the open button.

To get projects into the pull down, you use the "Add To Project List"
menu command in the Project's window's File menu. This will add the
project to the pull down to make it easier to open in the future.

tim.
Tim Endres, ICE Engineering, Inc.
mailto: time@ice.com http://www.ice.com
"Usenet - A slow moving self parody." -- Peter Honeyman

</pre>
<pre>Stephen Wynne wrote:
>
> I'd sure like to have someone's .jcvsrc with all the UNIX kinks taken
> out of it.

I would appreciate this as well.

--
Bill Peet peet@merl.com
Volume Graphics Group Direct : (617) 621-7529
Mitsubishi Electric ITA Main : (617) 621-7500
201 Broadway Fax : (617) 621-7597
Cambridge, MA 02139 http://3dvolumegraphics.com

</pre>
<pre>I'd sure like to have someone's .jcvsrc with all the UNIX kinks taken
out of it.

Thanks!

Steve

</pre>
<pre>Let's say I check out a new project using jCVS and begin working with it.
I then logout and go home. The next day, how do I use that project with jCVS
again? I've tried opening the Entries file under the CVS directory in my
working copy, but I just end up with a bunch of errors. I guess another way to
phrase my question is how do I get to the project view of an exsiting project
from the main screen?

Thanks for your help (and what looks like a great interface to CVS).
~~~~~~~~~~~~~~~~~~~ Kevin Dahlhausen ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Morse Controls ap096@po.cwru.edu
Thought for the day:
Advertising (n): the science of arresting the human
intelligence for long enough to get money from it.
-- Stephen Leacock.

</pre>
<pre>> Tim, are you sure? If edit doesn't enform the server then how can the
> server display being editted by in the status?

I am quite certain, because I did not want to write that code.
I was forced to.

The assumption is that you will run a command very soon after
that edit command. This is why jCVS includes the menu command
to send them off.

However, now that I look at the properties (now defaults.txt),
I see that jCVS sends a 'noop' command immediately. Thus, jCVS
should send the command asap. You can turn on tracing to see
the protocol to verify that it is occurring.

tim.
Tim Endres, ICE Engineering, Inc.
mailto: time@ice.com http://www.ice.com
"Usenet - A slow moving self parody." -- Peter Honeyman

</pre>
<pre>> Perhaps this reflects a misunderstanding on our part about the meaning of
> checkout and release vs edit and unedit.

There are indeed a few places where jCVS is confusing to those familiar
with the command line client. This is good from my point of view.
However, it is not good if these items are not well documented, so it
is clear I should devote a little more manual to this issue.

> On our Unix system with command line interface, checkout brings a copy of a
> file or directory over to a working directory, but leaves it marked as
> read-only. One needs to issue to "edit" command before being able to do
> anything to the file. "Unedit" abandons an editing session and marks the
> file read-only again.

There is a problem with using Java in that there is no mechanism to set
file permissions. Further, file permissions are not consistent across
all platforms. Thus, I have so far punted on this particular problem.

However, it has been suggested (more than once actually that I provide
a property that allows UNIX (and others when possible) users to define a
system command (aka "chmod" ) that can be exec-ed to accomplish the effect.

I am now strongly leaning towards adding this feature, since it is now
appearing that Java 1.2 will be of little help in this regard.

> After a little experimenting with jCVS, it seems that either you have a
> different model or that our model was incorrect. I cannot see that the
> Monitor>Edit and Monitor>Unedit commands in jCVS actually do anything.
> Nothing in the status of the file changes, the permissions on the file
> don't change, no visible indication appears in the project window, etc. Or
> are we missing something?

I believe that what is causing your confusion is that Edit and UnEdit
do not immediately connect to the server. This is done to accommodate
offline operation. Whenever you use Edit or Unedit, the commands will
be sent the next time that you connect. If you do not wish to wait until
then, use the "Monitor -> Send Notifications" command, which will cause
jCVS to connect to the server and send the notifications.

tim.
Tim Endres, ICE Engineering, Inc.
mailto: time@ice.com http://www.ice.com
"Usenet - A slow moving self parody." -- Peter Honeyman

</pre>
<pre>time@ice.com wrote:
>
> > I see no way to issue the CVS commands edit and unedit, however,
> > I do see that there is the ability to monitor edits/unedits.
> >
> > Is there a way to issue the edit or unedit command?
>
> This is done with the "Monitor" menu "Edit" and "Unedit" commands.
> Does this not work?

This is my misunderstanding of what "Monitor->Edit" does.
I thought "Monitor->Edit" was equivalent to the CVS command:

cvs watch add -a edit file

but it realy does

cvs edit file

--
Bill Peet peet@merl.com
Volume Graphics Group Direct : (617) 621-7529
Mitsubishi Electric ITA Main : (617) 621-7500
201 Broadway Fax : (617) 621-7597
Cambridge, MA 02139 http://3dvolumegraphics.com

</pre>
<pre>> I see no way to issue the CVS commands edit and unedit, however,
> I do see that there is the ability to monitor edits/unedits.
>
> Is there a way to issue the edit or unedit command?

This is done with the "Monitor" menu "Edit" and "Unedit" commands.
Does this not work?

tim.
Tim Endres, ICE Engineering, Inc.
mailto: time@ice.com http://www.ice.com
"Usenet - A slow moving self parody." -- Peter Honeyman

</pre>
<pre>I see no way to issue the CVS commands edit and unedit, however,
I do see that there is the ability to monitor edits/unedits.

Is there a way to issue the edit or unedit command?

--
Bill Peet peet@merl.com
Volume Graphics Group Direct : (617) 621-7529
Mitsubishi Electric ITA Main : (617) 621-7500
201 Broadway Fax : (617) 621-7597
Cambridge, MA 02139 http://3dvolumegraphics.com

</pre>
 
Forum Index » Profile for jcvslist » Messages posted by jcvslist
Go to:   
Powered by JForum 2.1.9 © JForum Team