Password authentication client -- CVS---Concurrent Versions System


Next: Password authentication security Prev: Password authentication server Up: Password authenticated Top: Top

4.5.2.2. Using the client with password authentication

Before connecting to the server, the client must log in with the command cvs login. Logging in verifies a password with the server, and also records the password for later transactions with the server. The cvs login command needs to know the username, server hostname, and full repository path, and it gets this information from the repository argument or the CVSROOT environment variable.

cvs login is interactive --- it prompts for a password: 

cvs -d bach@chainsaw.brickyard.com:/usr/local/cvsroot login 

CVS password:
The password is checked with the server; if it is correct, the login succeeds, else it fails, complaining that the password was incorrect.

Once you have logged in, you can force cvs to connect directly to the server and authenticate with the stored password by prefixing the repository with `:pserver:': 

cvs -d :pserver:bach@chainsaw.brickyard.com:/usr/local/cvsroot checkout foo
The `:pserver:' is necessary because without it, cvs will assume it should use rsh to connect with the server (see Connecting via rsh). (Once you have a working copy checked out and are running cvs commands from within it, there is no longer any need to specify the repository explicitly, because cvs records it in the working copy's CVS subdirectory.)

Passwords are stored by default in the file $HOME/.cvspass. Its format is human-readable, but don't edit it unless you know what you are doing. The passwords are not stored in cleartext, but are trivially encoded to protect them from "innocent" compromise (i.e., inadvertently being seen by a system administrator who happens to look at that file).

The CVS_PASSFILE environment variable overrides this default. If you use this variable, make sure you set it before cvs login is run. If you were to set it after running cvs login, then later cvs commands would be unable to look up the password for transmission to the server.

The CVS_PASSWORD environment variable overrides all stored passwords. If it is set, cvs will use it for all password-authenticated connections.


Next: Password authentication security Prev: Password authentication server Up: Password authenticated Top: Top