[cvsnt] Re: sspi vs. ssh ?!?

Ralf Steinhaeusser stralf at gmx.net
Sat Nov 8 17:22:18 GMT 2003


Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.


On Sat, 08 Nov 2003 15:57:39 +0000, Tony Hoyle <tmh at nodomain.org>
wrote:

>>And: To make brute-force impossible it would be great if I could set
>>up CVSNT to e.g. refuse connections for 5 minute after 3 logins
>>failed. And shuts down after 15 of this attacks.
>>
>That's make a nice easy DOS attack - just open it 15 times and type
>random passwords...
>CVSNT isn't an IDS - it's way outside its remit to try to do something
>like that.

OK, I see your point.

One more question: (honestly, this is the last one!!!)

Do you know (sorry for my stuid questions) is it possible to limit the
remote access to CVSNT to certain users?
(I want to put CVSNT on our (file-,database-...)-server where everyone
from our company has access to.
Using sspi that would mean (as far as I know) that everybody has the
right to work with the CVS. But only half of the people are using CVS.
And only half of the developers will use remote access.

Can I configure CVSNT to 
1.) refuse access to CVS for some users that have user acounts on the
server
2.) allow remote access to only a limited set of the remaining people?
(All the rest may then only connect when they are within the LAN)

Thanks for all your helpful and very quick responses!

Ralf


More information about the cvsnt mailing list
Download the latest CVSNT, TortosieCVS, WinCVS etc. for Windows 8 etc.
@CVSNT on Twitter   CVSNT on Facebook