Guys,
Our ObjectsStyle.org (aka logical-process.com) server was hacked couple of
days ago, so I had to reinstall the OS and implement new security
procedures. BTW, people that hacked it, installed (among other things)
software that contributes CPU to genom..ome Stanford University project
(http://genomeathome.stanford.edu/) . What a bunch of good people,
contributing stolen stuff to the community.
Your CVS accounts private keys were stored on the server, so they are
considered compromised. I had to remove them all. Do not try logging to CVS
with old keys. This document describes new, much more secure procedure to
create CVS accounts. Once you need to access cayenne CVS, you should follow
this rules to setup new accounts. Also anonymous CVS access is temporarily
down. I will see if I can/should restore it. FTP server is down
intentionally. All the downloads will be done via HTTP.
Misha, you may implement a similar procedure for your charity CVS (if you
ever configured one).
CVS over SSH setup steps on Windows (tested on Windows 2000):
=================================================
1. Make sure you HOME variable is defined. Simple way to define it is under
"Control Panel -> System -> Advanced -> Environment Variables" add new
*user* variable with name HOME and value %USERPROFILE%. This will set your
home to be "C:\Documents and Settings\username". Create ".ssh" folder under
your home directory.
2. Download needed binaries (ssh, cvs, etc.)
from http://www.objectstyle.org/downloads/win_cvs_ssh.zip
3. Unzip this file to a folder in your PATH
4. Generate your keys. Run "puttygen.exe", create a 1024 bit key and save
it under %HOME%/.ssh/identity . Public key will not be saved to a file -
you will need to copy it from puttygen window to the clipboard and paste it
in email that you should send to me ( you can use address "andrus at
objectstyle.org") . I will put it on the server and let you know your new
account name. (Note: difference with our previous approach is that a
private key will never cross the internet. It was generated on your
workstation and will stay there. BTW, you can use it to access multiple
hosts). puttygen.exe is probably the only command line Windows tool to
generate RSA keys. I got it from
http://www.chiark.greenend.org.uk/~sgtatham/putty/
..... wait till you get your new user name from me.
.....
5. under %HOME%/.ssh create a file named "config" with the following content:
Host objectstyle.org
User your_new_user_name
IdentityFile ~/.ssh/identity
PasswordAuthentication no
6. modify cvscmd.bat to change "user" in CVSROOT definition to your new name.
Now you can use cvscmd.bat to open command line with all CVS variables
setup. You can do "cvs co ObjectStyle" to try it... WinCvs users shoud
define their CVSROOT, identity file and CVS_RSH appropriately.
Enjoy.
Andrei
This archive was generated by hypermail 2.0.0 : Sat Oct 20 2001 - 20:49:36 EDT