review wanted for admin's guide to multisite and access control
Ben Finney
ben+bazaar at benfinney.id.au
Mon Dec 21 06:02:07 GMT 2009
Martin Pool <mbp at canonical.com> writes:
> Neil has written some more sections for the Administrator's guide.
> I'm going to review them, but it would also be useful to get review
> from Bazaar users, either for: things that you'd also want to know,
> things that seem incorrect, things that are unclear. Or praise is
> always welcome too.
First, praise: thanks to Neil for filling out more of this important
document.
Next, some quick proof-reading clarifications.
=====
SSH is a very well tested and featureful technology for authenticating users.
For situations where all of the developers have local accounts on the server,
-it is trivial to provide secure, authenticated ``bzr+ssh://`` access. One
+it is trivially easy to provide secure, authenticated ``bzr+ssh://`` access. One
concern with this method is that it may not be desirable to grant shell access
to developers on the server machine. In this case, Bazaar provides
``bzr_ssh_path_limiter``, a script that runs the Bazaar smart server on the
=====
=====
``bzr_ssh_path_limiter``, a script that runs the Bazaar smart server on the
server machine at a specified path, and allows no other access.
-To set it up, specify
-
-::
+To set it up, specify::
command="/path/to/bzr_ssh_path_limiter <path>" ssh-<type> <key>
=====
=====
different repositories. This then necessitates the use of multiple private
keys as just described.
-Finally, as noted above under `Using SSH`_ all of the public keys may be
+Finally, as noted above under `Using SSH`_, all of the public keys may be
included in the ``authorized_keys`` file of a single user on the server. It
is also possible to use a single private/public key pair for all of the
developers, but this only allows a single username for access control to the
=====
--
\ “Often, the surest way to convey misinformation is to tell the |
`\ strict truth.” —Mark Twain, _Following the Equator_ |
_o__) |
Ben Finney
More information about the bazaar
mailing list