[jsword-devel] [Fwd: CVS Repositories]

[Joe Walker]

I've loaded the subclipse plugin and it seems to work OK so far against 
the svn store used for subclipse.
Checkout was a little clunky, but that was probably because I don't 
store projects in my workspace. It doesn't do synchronize, but 
everything else is there, including "Resource History". It looks like 
they've used a lot of CVS team code and done s/cvs/svn/g on it!

I *think* the security issue is with 1.0.5 server, so the clients are 
not affected, and if we use webdav then there is fairly much 
standardized client/server protocol so old clients ought to work with 
newer servers.

I had a dig around and found a cvs2svn program that I have sent details 
of to Troy, so if we do decide to go ahead we should be able to keep the 
history.

This is short notice for me too. I guess I should have been reading 
sword-devel more closely. We probably have an option to ask Troy to keep 
our repo in CVS, but we need to a) make a case, and b) soon!

My current feeling is that I'd like to see history move to SVN, but if 
that happens then the hassle is probably worth it in the long term.

Joe.


DM Smith wrote:

> I have no experience w/ it.
>
> I rely on the merge/diff capabilities w/in Eclipse to understand 
> other's changes.
>
> I am not sure I understand the security risk. You seem to say that the 
> client software has a fault that allows it to exploit permissions on 
> the server. If that is the case, that is very bad.
>
> I have sent a patch earlier regarding the build that probably should 
> be applied first. I also have a few other pending changes relating to 
> limbo. I have found that we are building limbo into the jars and that 
> a couple of packages have classes actually being used. This may need 
> to be fixed.
>
> If we do go there, I would like a practical comparision between it and 
> CVS w/in Eclipse.
>
> Joe Walker wrote:
>
>>
>> Hi,
>>
>> Troy wants to move crosswire to SVN in place of CVS. I think this 
>> could be a hassle for eclipse users in the short term although doing 
>> it now probably makes sense as Troy is migrating everything to a new 
>> server.
>>
>> My biggest concern is, from 
>> http://subversion.tigris.org/project_packages.html
>> *Subversion versions up to and including 1.0.5 have a vulnerability 
>> allowing mod_authz_svn read restrictions to be evaded. 
>> <http://subversion.tigris.org/security/mod_authz_svn-copy-advisory.txt>. 
>> All users are advised to upgrade to 1.0.6 or 1.1.0-rc1.*
>>
>> But from http://subclipse.tigris.org/
>> Subclipse 0.9.3.1 is linked against Subversion 1.0.5 (Windows only 
>> for now)
>>
>> I'm hoping that that subclipse 0.9.3.1 linked to svn client 1.0.5 
>> will talk to svn server (whatever version we are using) and not leave 
>> us open to attack.
>>
>> So I think we might be stuck with command line or TortoiseSVN. Does 
>> anyone have experience of working with SVN and Eclipse, or SVN and 
>> Java in general?
>>
>> Joe.
>>
>> -------- Original Message --------
>> Subject:     CVS Repositories
>> Date:     Thu, 29 Jul 2004 18:33:10 -0700 (MST)
>> From:     Troy A. Griffitts <scribe777 at crosswire.org>
>> To:     crosswire-private at crosswire.org, Joe Walker 
>> <joe at eireneh.com>, William Thimbleby <wjt100 at york.ac.uk>, Johan 
>> Gorter <j.gorter at student.utwente.nl>, Terry Biggs <terry470 at alltel.net>
>>
>>
>>
>> PUBLIC SERVICE ANNOUNCEMENT:
>>
>> crosswire.org CVS repositories will be closing down for conversion on
>> Friday, July 30th at 7am MST (MST+7)(2pm UTC).
>>
>> Please have all your stuff checked in, or let your voice be heard 
>> that you need another day.
>>
>> New SubVersion repositories should be available from the new server
>> address by days end, Monday August 2nd.  Details to follow.
>>
>> Anyone wanting an SVN repository on CrossWire who doesn't currently have
>> an active CVS repository, please make your request known and we'd be 
>> happy
>> to facilitate.  Now's the time!
>>
>>
>> Read up!
>>
>> http://svnbook.red-bean.com/svnbook/book.pdf
>>
>>
>>     -Troy.
>>
>>
>> _______________________________________________
>> jsword-devel mailing list
>> jsword-devel at crosswire.org
>> http://www.crosswire.org/mailman/listinfo/jsword-devel
>>
>
> _______________________________________________
> jsword-devel mailing list
> jsword-devel at crosswire.org
> http://www.crosswire.org/mailman/listinfo/jsword-devel