Question

I have an SVN server I connect to with ssh+svn. When checking out a particular directory containing a lot of svn:external repositories, I have to enter my password numerous times.

1. How do I set up my Subversion client to automatically authenticate?
2. Where is the documentation for this?

Answer 1

I don’t know about the built-in mechanism of SVN to do automatic SSH authentication. But you can use the Public Key authentication mechanism from SSH :

Here is a short tutorial on how to do that : http://www.petefreitag.com/item/532.cfm You can easily find more information on the internet about this.

Since it can be useful, here’s a more detailed guide, with information about Agent Forwarding : http://unixwiz.net/techtips/ssh-agent-forwarding.html

Some basics about Public Key authentication

There’s different way for the remote SSH server to authenticate you when you try to login. The classic password is one of them. But it is also possible to use a mechanism based on asynchronous keys.

You create a key pair on your local machine : a private one and a public one. You must then distribute the public key to all remote SSH server where you want to log. It is really important that the private key is never distributed.

When you try to login, the remote server send a challenge which is encrypted with the private key. If you’re familiar with asynchronous cryptography, you know that only the public key can now decipher said encrypted challenge. So, when the server receives the response, it can decipher it and if the answer and the challenge are identical, you are authenticated.

No more password needed for you SVN operations or any other SSH connection to this remote machine.

SSH-agent

One more information about ssh-agents.

When you create your key pair, ssh-keygen will ask for a password to further encrypt the private key to improve its security. You can leave this password blank, this way you won’t have to enter a password when using the key.

However, if you choose a password, each time you want to use the key, you must enter the password, which will be the same as using password authentication with SSH. But there’s a neat solution : the ssh-agent.

An agent is a little daemon which will store your keys in memory. When you add the key to the agent with ssh-add, it will first ask you for your password and then, each time the SSH client will need the key, it will ask the agent, so no more password.

In my second link, you’ll find information about agent forwarding, which is also a good reason to use an ssh-agent.

I hope I’m clear, otherwise ask any questions you want.