[rt-users] Re: RT and CVS on different hosts

[Fabian Ritzmann]

On Mon, 2008-01-14 at 10:27, Feargal Reilly wrote:

Thank you, Feargal. I'm replying to rt-users now instead of rt-devel
with what are essentially setup questions.

> I've never even looked at the CVS code, but I (and others) run the 
> rt-mailgate on one machine, with the WebUI on another, and I assume the 
> same prinicples apply.
> Just install a second RT on the CVS host, minus the WebUI, and do the set 
> it to connect to the RT database remotely.
> I imagine that would work, but as I said, I've never looked at the CVS bit.

Thanks. I didn't consider that option properly. There are a few security
related issues I'm wondering about, though.

- If I'm not mistaken, the CVS commit handler script is run with user
permissions (we use CVS over SSH). I don't see an easy way of keeping
the rt_user database password protected in that case. Running it setuid
would be possible, but that seems risky to me, considering that a CVS
user could pass any junk to that script.

- I browsed through the "security issues" in the MySQL manual and found
SSL mentioned several times but no reference on how to configure mysqld
for it. Could somebody point me to the right section in the docs?

Fabian

> At 07:56 14/01/02, Fabian Ritzmann wrote:
> >Hi,
> >
> >I've looked into the CVS handler and it seems like a useful tool to me.
> >However, we run CVS on a different server than RT and I don't intend to
> >change that.
> >
> >Is anybody already working on a solution that would work with CVS and RT
> >on different machines? If not, I'll look into that in the next few
> >weeks. I'm thinking of a heavily modified rt-commithandler on the CVS
> >host and an enhanced-mailgate on the RT server.
> >
> >Fabian
> >
> >--
> >BOFH excuse #332:
> >
> >suboptimal routing experience
> >
> >
> >
> >
> >
> >_______________________________________________
> >rt-devel mailing list
> >rt-devel at lists.fsck.com
> >http://lists.fsck.com/mailman/listinfo/rt-devel
> 
> Feargal Reilly,
> Systems Administrator,
> The CIA.