Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

SVN encrypted password store

I installed SVN on a Ubuntu machine and I can't get my head around something.

Whenever I checkout something from the terminal I get this error about saving a non-encrypted password:

----------------------------------------------------------------------- ATTENTION!  Your password for authentication realm:     <[...]> Subversion Repository  can only be stored to disk unencrypted!  You are advised to configure your system so that Subversion can store passwords encrypted, if possible.  See the documentation for details.  You can avoid future appearances of this warning by setting the value of the 'store-plaintext-passwords' option to either 'yes' or 'no' in '/home/[...]/.subversion/servers'. ----------------------------------------------------------------------- 

I goggled it a bit but I couldn't find anything useful. I found one topic where it said this was a client issue, not a server one, but I'm still not convinced.

It says "configure your system"; what exactly does it mean by that? The server or the client? If I'm the server, is there anything I can do about it? besides hiding the warning (like it says)...

Thanks!

like image 973
treznik Avatar asked Sep 29 '10 18:09

treznik


People also ask

Where does SVN store passwords?

On Windows, the Subversion client stores passwords in the %APPDATA%/Subversion/auth/ directory.

Where is SVN password stored Linux?

The authentication credentials can usually be found in: Mac OS X / Linux : ~/. subversion/auth/svn. simple.

How do I stop SVN asking for password?

To disable password caching entirely for any single Subversion command-line operation, pass the --no-auth-cache option to that command line. To permanently disable caching entirely, add the line store-passwords = no to your local machine's Subversion configuration file.

How do I remove credentials from SVN?

The first thing that you need to do is to find the auth folder in the subversion directory that can be found tipically in the %appdata%\Subversion\auth e.g C:\Users\<your-username>\AppData\Roaming\Subversion\auth . Finally, select the auth folder and delete it.


1 Answers

It is a client issue. It warns you that the credentials used for the different servers are being stored in plain text. You can hide that warning or use an encrypted storage to cache the passwords.

See: http://blogs.collab.net/subversion/2009/07/subversion-16-security-improvements

like image 175
frisco Avatar answered Sep 30 '22 12:09

frisco