public inbox for [email protected]help / color / mirror / Atom feed
Problems logging into CVS server 4+ messages / 3 participants [nested] [flat]
* Problems logging into CVS server @ 2004-07-12 20:45 Devrim GUNDUZ <[email protected]> 0 siblings, 1 reply; 4+ messages in thread From: Devrim GUNDUZ @ 2004-07-12 20:45 UTC (permalink / raw) To: [email protected]; +Cc: pgsql-www -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, We currently experience problems while logging into CVS server: [pgsql75@gunduz pgsql75]$ cvs -z3 -d :pserver:[email protected]:/projects/cvsroot co -P pgsql cvs checkout: authorization failed: server anoncvs.postgresql.org rejected access to /projects/cvsroot for user anoncvs FYI... - -- Devrim GUNDUZ devrim~gunduz.org devrim.gunduz~linux.org.tr http://www.tdmsoft.com http://www.gunduz.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFA8vh/tl86P3SPfQ4RAqy8AJ0RT1BoFpJjiWZgfbSxpookbTaZTACfeIGo UCNQv5zjByUhdjMt7w6TCYI= =m2Ks -----END PGP SIGNATURE----- ^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Problems logging into CVS server @ 2004-07-12 21:31 Marc G. Fournier <[email protected]> parent: Devrim GUNDUZ <[email protected]> 0 siblings, 1 reply; 4+ messages in thread From: Marc G. Fournier @ 2004-07-12 21:31 UTC (permalink / raw) To: Devrim GUNDUZ <[email protected]>; +Cc: [email protected]; pgsql-www Damn ... I'll have to look at it ... we had a hacker get in through the way anoncvs was setup, so I set a passwd on in /etc/passwd (but didn't touch the anoncvs setup itself) ... will play with it tonight and see if I can figure out how to do a more secure anon-cvs ;( I have to be missing something in the config *sigh* On Mon, 12 Jul 2004, Devrim GUNDUZ wrote: > ------------------------------------------------------------------------------ > /usr/local/libexec/ppf_verify: pgp command failed > > gpg: WARNING: using insecure memory! > gpg: please see http://www.gnupg.org/faq.html for more information > gpg: Signature made Mon Jul 12 17:45:51 2004 ADT using DSA key ID 748F7D0E > gpg: Can't check signature: public key not found > ------------------------------------------------------------------------------ > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > Hi, > > We currently experience problems while logging into CVS server: > > [pgsql75@gunduz pgsql75]$ cvs -z3 -d :pserver:[email protected]:/projects/cvsroot co -P pgsql > cvs checkout: authorization failed: server anoncvs.postgresql.org rejected > access to /projects/cvsroot for user anoncvs > > FYI... > - -- > Devrim GUNDUZ > devrim~gunduz.org devrim.gunduz~linux.org.tr > http://www.tdmsoft.com > http://www.gunduz.org > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.2.1 (GNU/Linux) > > iD8DBQFA8vh/tl86P3SPfQ4RAqy8AJ0RT1BoFpJjiWZgfbSxpookbTaZTACfeIGo > UCNQv5zjByUhdjMt7w6TCYI= > =m2Ks > -----END PGP SIGNATURE----- > > > ---------------------------(end of broadcast)--------------------------- > TIP 3: if posting/reading through Usenet, please send an appropriate > subscribe-nomail command to [email protected] so that your > message can get through to the mailing list cleanly > ---- Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: [email protected] Yahoo!: yscrappy ICQ: 7615664 ^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Problems logging into CVS server @ 2004-07-13 00:53 Justin Clift <[email protected]> parent: Marc G. Fournier <[email protected]> 0 siblings, 1 reply; 4+ messages in thread From: Justin Clift @ 2004-07-13 00:53 UTC (permalink / raw) To: Marc G. Fournier <[email protected]>; +Cc: Devrim GUNDUZ <[email protected]>; [email protected]; pgsql-www Marc G. Fournier wrote: > > Damn ... I'll have to look at it ... we had a hacker get in through the > way anoncvs was setup, so I set a passwd on in /etc/passwd (but didn't > touch the anoncvs setup itself) ... will play with it tonight and see if > I can figure out how to do a more secure anon-cvs ;( I have to be > missing something in the config *sigh* Um, that sounds worrying. Was the activity of the hacker anything that would affect PG code, or access to anything sensitive (account passwords, etc)? Regards and best wishes, Justin Clift ^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Problems logging into CVS server @ 2004-07-13 01:16 Marc G. Fournier <[email protected]> parent: Justin Clift <[email protected]> 0 siblings, 0 replies; 4+ messages in thread From: Marc G. Fournier @ 2004-07-13 01:16 UTC (permalink / raw) To: Justin Clift <[email protected]>; +Cc: Devrim GUNDUZ <[email protected]>; [email protected]; pgsql-www On Tue, 13 Jul 2004, Justin Clift wrote: > Marc G. Fournier wrote: > >> >> Damn ... I'll have to look at it ... we had a hacker get in through the >> way anoncvs was setup, so I set a passwd on in /etc/passwd (but didn't >> touch the anoncvs setup itself) ... will play with it tonight and see if I >> can figure out how to do a more secure anon-cvs ;( I have to be missing >> something in the config *sigh* > > Um, that sounds worrying. Was the activity of the hacker anything that would > affect PG code, or access to anything sensitive (account passwords, etc)? No ... anoncvs is not part of the same group as the primary cvsroot, so not able to commit to the source tree ... the anoncvs cvsroot is a different directory structure altogether (/projects/cvsroot vs /cvsroot), and the anoncvs user has no write permissions on /cvsroot ... ---- Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: [email protected] Yahoo!: yscrappy ICQ: 7615664 ^ permalink raw reply [nested|flat] 4+ messages in thread
end of thread, other threads:[~2004-07-13 01:16 UTC | newest] Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2004-07-12 20:45 Problems logging into CVS server Devrim GUNDUZ <[email protected]> 2004-07-12 21:31 ` Marc G. Fournier <[email protected]> 2004-07-13 00:53 ` Justin Clift <[email protected]> 2004-07-13 01:16 ` Marc G. Fournier <[email protected]>
This inbox is served by agora; see mirroring instructions for how to clone and mirror all data and code used for this inbox