Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Eclipse Projects » Subversive » How can I encrypt and decrypt repository password?(Protect repository from home access.)
How can I encrypt and decrypt repository password? [message #493219] Fri, 23 October 2009 16:48 Go to next message
Putthibong Boonbong is currently offline Putthibong Boonbong
Messages: 6
Registered: October 2009
Junior Member
I want to give an encrypted password to junior developers to protect repository from home access. And when they enter password in repository location, it's decrypted and stored in SVNRepositoryLocation normally. Where should I look in the code?

Regards,
Putthibong Boonbong
Re: How can I encrypt and decrypt repository password? [message #493437 is a reply to message #493219] Mon, 26 October 2009 09:26 Go to previous messageGo to next message
Igor Burilo is currently offline Igor Burilo
Messages: 435
Registered: July 2009
Senior Member
Hello Putthibong,

Sorry, but I don't understand what you want to achieve: You don't want that
your developers know real svn password and so you want to provide them
encrypted password? Could you please explain your question in more details?

>I want to give an encrypted password to junior developers to protect
>repository from home access. And when they enter password in repository
>location, it's decrypted and stored in SVNRepositoryLocation normally.
>Where should I look in the code?
>
> Regards,
> Putthibong Boonbong
Re: How can I encrypt and decrypt repository password? [message #493533 is a reply to message #493437] Mon, 26 October 2009 16:44 Go to previous messageGo to next message
Putthibong Boonbong is currently offline Putthibong Boonbong
Messages: 6
Registered: October 2009
Junior Member
Hello Igor,

I don't want junior developers, developer who are on probation and contractors know real password. They might be able to steal source code or keep it at home. With svn+ssh, they can still access repository if they have key and pass-phrase.

So, I will give encrypt password, provide custom eclipse package for them. When they enter password, subversive will decrypt password and store the real password in cache. It would be nice if we can store encrypt password.

Could you please advise me on how to do this? Does it has a better solution to protect source code?


Best regards,

Putthibong Boonbong
Re: How can I encrypt and decrypt repository password? [message #493609 is a reply to message #493533] Tue, 27 October 2009 08:46 Go to previous messageGo to next message
Igor Burilo is currently offline Igor Burilo
Messages: 435
Registered: July 2009
Senior Member
Hello,

I can see here a following solution: you can prepare environment with
entered security items for such junior developers, e.g. for each junior
developer you provide an eclipse distribution, where you create SVN
repository location with all needed information: url, password etc. What it
gives? It gives that only you (or the trusted person) who knows password (or
other security issues) enters the password, but junior developers just use
them and they will never know passwords (of course, if they don't break
Eclipse security storage :).
As for your solution to this problem: you proposed that Subversive allows
encrypted password to be entered. But if Subversive allows it, what can
prevent for junior developers to use these encrypted passwords at home, as
Subversive understands them?

> Hello Igor,
>
> I don't want junior developers, developer who are on probation and
> contractors know real password. They might be able to steal source code or
> keep it at home. With svn+ssh, they can still access repository if they
> have key and pass-phrase.
>
> So, I will give encrypt password, provide custom eclipse package for them.
> When they enter password, subversive will decrypt password and store the
> real password in cache. It would be nice if we can store encrypt password.
>
> Could you please advise me on how to do this? Does it has a better
> solution to protect source code?
>
>
> Best regards,
>
> Putthibong Boonbong
Re: How can I encrypt and decrypt repository password? [message #493718 is a reply to message #493609] Tue, 27 October 2009 16:31 Go to previous messageGo to next message
Putthibong Boonbong is currently offline Putthibong Boonbong
Messages: 6
Registered: October 2009
Junior Member
Hello,

I have been using your first solution to protect subversion.

In case of contractor, we create Linux image with Eclipse and disable all services. They cannot use this image to access internet except update and commit. But sometime, Subversive forgot password. So, I have to use remote access to contractor machine, open their VM player and re-enter password. It's quite uncomfortable when we work with many contractors.

I have been trying to create extension to Subversive plugin. With this solution, I can give them a fake password that cannot be used outside Linux image.


Best regards,

Putthibong Boonbong
Re: How can I encrypt and decrypt repository password? [message #493826 is a reply to message #493718] Wed, 28 October 2009 08:22 Go to previous messageGo to next message
Igor Burilo is currently offline Igor Burilo
Messages: 435
Registered: July 2009
Senior Member
Hello,

>But sometime, Subversive forgot password.
What do you mean here? Do you use 'Save Password' option? If it's possible,
could you please describe the use case when Subversive forgets password?

I'm not sure but probably you can look to Apache's abilities to limit access
for junior developers (of course if your SVN server works with Apache)?

> Hello,
>
> I have been using your first solution to protect subversion.
>
> In case of contractor, we create Linux image with Eclipse and disable all
> services. They cannot use this image to access internet except update and
> commit. But sometime, Subversive forgot password. So, I have to use remote
> access to contractor machine, open their VM player and re-enter password.
> It's quite uncomfortable when we work with many contractors.
>
> I have been trying to create extension to Subversive plugin. With this
> solution, I can give them a fake password that cannot be used outside
> Linux image.
>
>
> Best regards,
>
> Putthibong Boonbong
Re: How can I encrypt and decrypt repository password? [message #494261 is a reply to message #493826] Thu, 29 October 2009 19:53 Go to previous messageGo to next message
Putthibong Boonbong is currently offline Putthibong Boonbong
Messages: 6
Registered: October 2009
Junior Member
Hello,

This issue occur in contractor's VM environment.

Network service was error and contractor cannot connect to internet. We have to restart network service with remote access.

Now, there are two case:
1. Subversive show blank username and password dialog.
2. Subversive show username and password dialog. After click confirm without re-enter password, this dialog appear again.

Both of them occur after the network service was down.


Best regards,

Putthibong Boonbong
Re: How can I encrypt and decrypt repository password? [message #494911 is a reply to message #494261] Tue, 03 November 2009 08:44 Go to previous messageGo to next message
Igor Burilo is currently offline Igor Burilo
Messages: 435
Registered: July 2009
Senior Member
Hello,

We need to deeper investigate this problem. What SVN connector (name and
version), protocol (e.g. svn+ssh, http) do you use?

> Hello,
>
> This issue occur in contractor's VM environment.
>
> Network service was error and contractor cannot connect to internet. We
> have to restart network service with remote access.
>
> Now, there are two case:
> 1. Subversive show blank username and password dialog.
> 2. Subversive show username and password dialog. After click confirm
> without re-enter password, this dialog appear again.
>
> Both of them occur after the network service was down.
>
>
> Best regards,
>
> Putthibong Boonbong
>
Re: How can I encrypt and decrypt repository password? [message #495306 is a reply to message #494911] Wed, 04 November 2009 14:38 Go to previous messageGo to next message
Putthibong Boonbong is currently offline Putthibong Boonbong
Messages: 6
Registered: October 2009
Junior Member
Hello,

We are using ubuntu 8.10, eclipse 3.4, svnkit 1.3 and VMWare Player. Subversion protocol is svn.


Best regards,

Putthibong Boonbong
Re: How can I encrypt and decrypt repository password? [message #495813 is a reply to message #495306] Fri, 06 November 2009 08:50 Go to previous messageGo to next message
Igor Burilo is currently offline Igor Burilo
Messages: 435
Registered: July 2009
Senior Member
Hello Putthibong,

Do you have username, password filled for corresponding repository location,
click Location Properties for repository location and check it. Probably SVN
connector incorrectly handles connection fails, did you try to restart
Eclipse if such a problem happens?

> Hello,
>
> We are using ubuntu 8.10, eclipse 3.4, svnkit 1.3 and VMWare Player.
> Subversion protocol is svn.
>
>
> Best regards,
>
> Putthibong Boonbong
Re: How can I encrypt and decrypt repository password? [message #496281 is a reply to message #493219] Mon, 09 November 2009 15:41 Go to previous messageGo to next message
Putthibong Boonbong is currently offline Putthibong Boonbong
Messages: 6
Registered: October 2009
Junior Member
Hello,

After restart network service and re-enter password, I've not found this problem yet. If I can reproduce this issue again, I will inform you. For the security issue, I will try ssh+ssh and http+mod_svn. Thank a lot for your help.


Best regards,

Putthibong Boonbong
Re: How can I encrypt and decrypt repository password? [message #496469 is a reply to message #496281] Tue, 10 November 2009 08:56 Go to previous message
Igor Burilo is currently offline Igor Burilo
Messages: 435
Registered: July 2009
Senior Member
Hello Putthibong,

You're welcome.

"Putthibong Boonbong" <springframework@msn.com>
Previous Topic:.svn folders not hidden after Share on existing checkout until close/open
Next Topic:Subversive SVN connectors update-sites: galileo-site vs. update-site
Goto Forum:
  


Current Time: Thu Oct 30 17:30:55 GMT 2014

Powered by FUDForum. Page generated in 0.02108 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software