Push changes to a restricted account

[Octavian Râşniţă]

Hi,

In the Mercurial documentation I read "...Set up a restricted-access
account; users can push changes over the network
to repositories managed by this account, but they cannot log into the
account and run normal shell commands.".

This is exactly what I would like to do, but I have also read that "When
using public key authentication, ssh allows limiting the user to one
specific command...".

Well, I have configured an hg account that owns the repositories but I want
the users to use a password (and not public keys) for pushing changes and I
also don't want them to be able to have full ssh access on that account. Is
this possible?

Thanks.

Octavian

_______________________________________________
Mercurial mailing list
Mercurial@...
http://selenic.com/mailman/listinfo/mercurial

[Dennis Brakhane-2]

2009/10/11 Octavian Râşniţă <orasnita@...>:
> Well, I have configured an hg account that owns the repositories but I want
> the users to use a password (and not public keys) for pushing changes and I
> also don't want them to be able to have full ssh access on that account. Is
> this possible?

You can use mercurial-server for this

http://www.lshift.net/mercurial-server.html

_______________________________________________
Mercurial mailing list
Mercurial@...
http://selenic.com/mailman/listinfo/mercurial

[Octavian Râşniţă]

From: "Dennis Brakhane" <brakhane@...>
2009/10/11 Octavian Râşniţă <orasnita@...>:
> Well, I have configured an hg account that owns the repositories but I
> want
> the users to use a password (and not public keys) for pushing changes and
> I
> also don't want them to be able to have full ssh access on that account.
> Is
> this possible?

You can use mercurial-server for this

http://www.lshift.net/mercurial-server.html

On that page I read that "Developers are authenticated only using SSH keys;
no other form of authentication is supported.".
So no password-based access unfortunately but only public keys.

Thank you.

Octavian


_______________________________________________
Mercurial mailing list
Mercurial@...
http://selenic.com/mailman/listinfo/mercurial

[Paul Crowley]

Octavian Râşniţă wrote:
> http://www.lshift.net/mercurial-server.html
>
> On that page I read that "Developers are authenticated only using SSH keys;
> no other form of authentication is supported.".
> So no password-based access unfortunately but only public keys.

It's not clear to me that what you want is even possible.  Could you
describe how an implementation might achieve it in practice, given the
limitations of existing ssh daemon implementations?
--
   [][][] Paul Crowley
     [][] LShift Ltd
   []  [] www.lshift.net


_______________________________________________
Mercurial mailing list
Mercurial@...
http://selenic.com/mailman/listinfo/mercurial