Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.
firefox wrote:
> I'm still using SSPI to connect to the server in our LAN, but how can i
> connect to the server from a remote client?
> The CVS server is behind a firewall - how get the remote client access to
> the server? What protocol can be used instead of SSH?
You can still use SSPI in that setup as long as either the client is
also on Windows or if you could do without strong encryption. I'm not
familiar with the specifics of this setup myself however. Bo posted
something a short while ago IIRC. There even might be something buried
in the Wiki somewhere...
Talking of which I just found the post from Bo I remembered (or at least
one of them, I think he explained this more than once already):
"
-------- Original Message --------
Subject: RE: [cvsnt] SSPI Protocol security
Date: Fri, 7 Mar 2003 13:32:05 +0100
From: Bo Berglund <Bo.Berglund at system3r.se>
Organization: cvsnt.org news server
To: <cvsnt at cvsnt.org cvsnt downloads at march-hare.com @CVSNT on Twitter CVSNT on Facebook>
Newsgroups: support.cvsnt
Concerning "best practices" over Internet:
1) Set up your server to *only* allow SSPI and other secure protocols
(like SSH)
(Disable pserver by erasing the pserver_protocol.dll from the server)
2) Open the firewall port 2401 and aim it towards your internal CVSNT
server.
3) On the client side set your sspi as follows
:sspi:user at server:/repository
(server must be the firewall IP address in this case)
Also make sure to check the encryption flag in WinCvs (button to the
right
of the protocols selection combo).
4) You must start on the client by doing a cvs login and enter the system
password for the user. It will be sent encrypted and is also stored
in your
client PC in a fairly secure way for reuse on later cvs operations.
5) Now you can operate on this CVSNT server via the Internet as usual.
I have done this myself and it works pretty well, actually the
combination of
encryption and compression makes it usable even on a dialup link to the
Internet provider.
/Bo
"
Hope this helps.
--
Oliver
---- ------------------
JID: ogiesen at jabber.org
ICQ: 18777742 (http://wwp.icq.com/18777742)