SVN avoid storing passwords in plain text?

Question

Under a bare bones setup for SVN on windows (without using VisualSVN), as per the instructions, the passwords are to be entered in the passwd file.

Does SVN provide a way to encrypt or atleast mask this file? as if a person has access to the server directories, he can quite casually edit these files in plain text and come to know of all passwords for the SVN repositories.

I'm not installing the apache service etc. Just basic SVN on a windows 2003 server with TortoiseSVN as client.

Cheers K

Answer 1

If the SVN version you are using supports SASL you can have a look at Using Cyrus SASL Authentication with Subversion.

To check if SASL is supported run 'svnserve --version' and look for a line reading 'Cyrus SASL authentication is available.' as stated in the svnserve.conf file.