This is a tutorial on how to setup a Subversion (SVN) repository on Windows that allows secure connections over SSH. The tutorial also goes through setting up an SVN client and connecting to the repository. Some basic knowledge of a UNIX based command line will help, but you might be able to muddle through without it.

If you plan on storing the repository on the development machine (normally only useful if you are a lone wolf developer and always use the same development box), this tutorial will be more complicated than you need.

This tutorial was tested with the repository installed on Windows Server 2003, and the SVN client on Windows XP, although the process is pretty much the same on any version of Windows.

Cygwin Insall ScreenshotInstall Cygwin

Cygwin is linux-like environment for Windows. It gives you a terminal much like you would find on any *nix based system, and is one of my favorite development tools.

Download Cygwin, and install it on the server. You can keep all of the defaults for Installation Type, Installation Directory, etc. The only thing you need to change is the packages selected for install. Keep all of the packages that are initially selected, plus select ‘openssh’ from the Net category, ’subversion’ from the Devel category, and ‘cygrunsrv’ from Admin.

Install the SSH Daemon

The SSH daemon provides secure communication between the client and server. It will be used to encrypt any updates that are made to the repository.

In order to install it, make sure you are logged in as an Administrator. Open Cygwin and run

  1. ssh-host-config -y

to run the ssh config script.

when it asks for the value of the environment variable CYGWIN, type ‘ntsec tty’

If you see warnings or errors related to file permissions, run the following lines, then rerun the config script. Note that I’m no security expert, so please take these directions with a grain of salt.

  1. chmod +x /var
  2. chmod  +rw /etc/group
  3. chmod +rw /etc/passwd

Once ssh-host-config finishes with the info message ‘Have fun!’ the ssh daemon is configured.

ssh-host-config screenshot

Depending on your system, you may run into something like this instead:

ssh-host-config screenshot 2

The daemon was successfully configured, but for some reason privilege separation failed. If you are happy with a slightly less secure system, you can go ahead and use it this way. And if anyone knows how to fix this issue, please let me know.

Go ahead and start it up with

  1. cygrunsrv -S sshd

Test the setup by running

  1. ssh localhost

which should now allow you to log in with your Windows password.

Create the SVN Repository

Inside of Cygwin, run the following command to create a repository called svn inside the home directory:

  1. svnadmin create /home/svn

If you are restoring the repository from another location, run

  1. svnadmin load /home/svn < <dumpfile-name>

Setup a Client

Now that the server is setup, lets checkout the code onto a development machine.

Start by installing Cygwin on the dev box. Installing using the default options works fine, and go ahead and select the same packages used in the server installation.

Open cygwin and run

  1. svn co  svn+ssh://<username>@<your server name or IP>/home/svn

Remember to fill in your own details - here <username> is the username on the server machine.

Setup Additional Users

You will want to create a seperate user for everyone who will be commiting to the repository.

Create a new Windows user on the server, here we will create the user ‘devel’. The username can be whatever you choose, but avoiding spaces and punctuation characters in the username might make your life easier down the road, since cygwin can sometimes choke on weird usernames. As a generally good security practice, the new user should not be an administrator, it should have limited rights, and it should have a strong password set.

Here are instructions for creating a user for Windows Server 2003.

Now we need to let Cygwin know about the new user. To do so, run these commands:

  1. chmod u+w /etc/passwd
  2. chmod u+w /etc/group
  3. mkpasswd -l > /etc/passwd
  4. mkgroup -l > /etc/group

The user devel will now have access to the repository. Check by running

  1. svn list svn+ssh://devel@<your server name or IP>/home/svn

Thats all there is to it!