[cvsnt] newbie questions about cvsnt remote access

[Bo Berglund]

- 2.0.11 is *really* old...

1. Remote access by opening up port 2401 on the Internet firewall is OK.
Just set it to forward calls on TCP=2401 to the internal CVSNT server.
2402 is never opened because it is only used by the CVSNT server itself
and need to be available only for the server itself. And I do not
believe that the lockserver was even available back on 2.0.11....

But when you do this I recommend that you switch from pserver to sspi
because it is inherently more secure and has an encryption setting so
that all of your traffic on the Internet will be encrypted.
Or use sserver, which is an encrypted version of pserver. But then you
likely must upgrade the server from 2.0.11 to 2.5.03.2260....
I have an installation guide here:
http://web.telia.com/~u86216177/InstallCVSNT25.html

2. Web frontends are available but only for *browsing* readonly.
No active web frontends exist to my knowledge.

3. Don't know what good SSL would do you in this case, you have an
access
problem via Internet etc and the server is a Windows machine so I don't
think you can set up SSL or SSH....

4. I use the 2401 port forwarding technique on my ADSL firewall and I
use SSPI.

Best regards,

Bo Berglund


-----Original Message-----
From: cvsnt-bounces at cvsnt.org [mailto:cvsnt-bounces at cvsnt.org] On Behalf
Of Gerhard Hofmann
Sent: den 4 maj 2006 11:24
To: cvsnt at cvsnt.org
Subject: [cvsnt] newbie questions about cvsnt remote access

Hi all,

I have taken over administration of an existing cvsnt server from an 
ex-colleague, so please don't blame me in case of asking silly questions

that may have been asked before...

We run cvsnt 2.0.11 (I guess this is rather old) and our developers use 
TortoiseCVS to work with the repository.

Some of them would like to work with cvs from home or from our 
customers' LAN ("roadwarriors").

I have thought about some possibilities to achieve this:
1. setup port-forwarding of pserver port 2401 on our DSL router. Is this

a good idea? Would we also need to forward lock server port 2402? An 
obvious drawback of this approach is that on the customer's site 
outgoing connections on port 2401 would have to be enabled...

2. web frontend: there seem to be a number of web frontends allowing 
read only access. Which ones do you know that also allow write access?

3. configure both cvsnt and TortoiseCVS to use SSL. Is there any 
tutorial around how this can be done? Would I need any additional 
software (OpenSSH, Web Server...) for it?

How do you use CVS from remote?

TIA
Gerhard
_______________________________________________
cvsnt mailing list
cvsnt at cvsnt.org
http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt