public inbox for cygwin@cygwin.com
 help / color / mirror / Atom feed
From: Todor Ivanov <tivanov@rockhopper-algorithmics.com>
To: cygwin@cygwin.com
Subject: Subversion not saving encrypted password after update of cygwin 32bit
Date: Tue, 6 Dec 2022 17:38:21 +0200	[thread overview]
Message-ID: <CAOv4OrVYjKB+rqgdHnTh=dkOTwd3TMWXMMRnaGmF17Kf07f2mg@mail.gmail.com> (raw)
In-Reply-To: <CAOv4OrXwOJfmR_Bgyg7XDxzQS-jAQ+OQ9iRkbU2E2d9u1tgO9w@mail.gmail.com>

[-- Attachment #1: Type: text/plain, Size: 2000 bytes --]

       Hello,

       We upgraded our cygwin 32 bit install on a Windows 2008 R2 server,
because we needed the latest python stuff and this also upgraded all core
packages, sshd (cygwin), subversion included. What changed is the svn auth
caching. As this is a remote machine, we login via ssh + key (passwordless)
to its sshd cygwin server and use svn commands from there. Now if we login
using ssh + key, the password does not get saved and asks every time.
However if we login via ssh + password the password is saved in an
encrypted way using windows-cryptoapi. We investigated a little bit and see
that profiles have different attributes when using a key and a password,
i.e:

With key:
uid=1002(ouruser) gid=513(None) groups=513(None),66048(LOCAL),66049(CONSOLE
LOGON),4(INTERACTIVE),15(This Organization),545(Users),11(Authenticated
Users),197624(bus-beta),197625(dev-beta),1010(HelpLibraryUpdaters),0(root),559(Performance
Log Users),555(Remote Desktop Users),405504(High Mandatory Level)

With password:
uid=1002(ouruser) gid=513(None) groups=513(None),114(Local account and
member of Administrators
group),197624(bus-beta),197625(dev-beta),1010(HelpLibraryUpdaters),0(root),559(Performance
Log Users),555(Remote Desktop
Users),545(Users),4(INTERACTIVE),66049(CONSOLE LOGON),11(Authenticated
Users),15(This Organization),113(Local
account),4095(CurrentSession),262154(NTLM Authentication),405504(High
Mandatory Level)

After the upgrade the following packages could not be downloaded from any
of the listed mirrors. I also googled and browsed the repositories, but
they seem to be missing and show in cygcheck as "Incomplete":

libpq
libppl-devel
libnetcdf6
libguile12
libbotan-devel

 Simple authentication works for ssh+key, but I really try to avoid this. I
also tried recreating the .subversion folder, which did not change
anything.  I did a strace and did not find any error stuff, so I don't know
how to proceed further. Your tips and guidelines are very welcome.

Kind regards,
Todor

      reply	other threads:[~2022-12-06 15:38 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-11-24 18:11 Todor Ivanov
2022-11-28 12:43 ` Todor Ivanov
2022-12-06 15:38   ` Todor Ivanov [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='CAOv4OrVYjKB+rqgdHnTh=dkOTwd3TMWXMMRnaGmF17Kf07f2mg@mail.gmail.com' \
    --to=tivanov@rockhopper-algorithmics.com \
    --cc=cygwin@cygwin.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).