[svnbook] r5423 committed - branches/1.8/zh/book/ch03-advanced-topics.xml

[wuzhouhui at users.sourceforge.net]

Revision: 5423
          http://sourceforge.net/p/svnbook/source/5423
Author:   wuzhouhui
Date:     2017-09-12 12:53:12 +0000 (Tue, 12 Sep 2017)
Log Message:
-----------
1.8/zh: translation of chapter 3 in progress

Modified Paths:
--------------
    branches/1.8/zh/book/ch03-advanced-topics.xml

Modified: branches/1.8/zh/book/ch03-advanced-topics.xml
===================================================================
--- branches/1.8/zh/book/ch03-advanced-topics.xml	2017-09-10 03:59:41 UTC (rev 5422)
+++ branches/1.8/zh/book/ch03-advanced-topics.xml	2017-09-12 12:53:12 UTC (rev 5423)
@@ -8323,8 +8323,12 @@
 
     <!-- =============================================================== -->
     <sect2 id="svn.serverconfig.netmodel.creds">
+    <!--
       <title>Client Credentials</title>
+    -->
+      <title>客户端证书</title>
 
+    <!--
       <para>Many Subversion servers are configured to require
         authentication.  Sometimes anonymous read operations are
         allowed, while write operations must be authenticated.  In
@@ -8336,7 +8340,15 @@
         retrieve and store a user's authentication credentials, from
         interactive prompting for usernames and passwords to encrypted
         and non-encrypted on-disk data caches.</para>
+    -->
+      <para>很多 Subversion 服务器都会要求认证. 有时候匿名的读操作是允许的,
+        但是写操作必须提供得到授权, 还有些服务器要求读写都需要认证. 不同的
+        Subversion 服务器选项支持不同的认证协议, 但是从用户的视角来看, 可以
+        把认证简单地理解为用户名与密码. Subversion 客户端提供了几种不同的方法
+        来检索和存放用户的认证证书, 包括交互性地提示用户输入用户名与密码, 以及
+        存放在磁盘上的加密或未加密过的数据缓存.</para>
 
+    <!--
       <para>The security-conscious reader will suspect immediately
         that there is reason for concern here.  <quote>Caching
         passwords on disk?  That's terrible!  You should never do
@@ -8344,11 +8356,20 @@
         The following sections discuss the various types of credential
         caches that Subversion uses, when it uses them, and how to
         disable that functionality in whole or in part.</para>
+    -->
+      <para>对安全比较敏感的读者可能在想 <quote>在磁盘上缓存密码? 这可是个
+          馊主意, 千万不要这么干!</quote> 不用担心—并没有听起来的这么
+        糟糕. 下面将介绍 Subversion 使用的几种证书缓存类型, 什么时候用到它们,
+        以及如何禁止它们的全部或部分功能.</para>
 
       <!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
       <sect3 id="svn.serverconfig.netmodel.credcache">
+    <!--
         <title>Caching credentials</title>
+    -->
+        <title>缓存证书</title>
 
+    <!--
         <para>Subversion offers a remedy for the annoyance caused when
           users are forced to type their usernames and passwords over
           and over again.  By default, whenever the command-line
@@ -8362,6 +8383,13 @@
           cached credentials ultimately fail to authenticate, the
           client will, by default, fall back to prompting the user for
           the necessary information.</para>
+    -->
+        <para>Subversion 提供了一种方法, 用于避免用户每次都要输入用户名与密码.
+          在默认情况下, 每当客户端成功地响应服务器的认证请求时, 认证证书都会
+          被缓存到磁盘上, 并把服务器的主机名, 端口与认证域的组合作为键值. 这个
+          缓存在将来会被自动查阅, 这就避免了用户再次输入认证证书. 如果在缓存中
+          没有找到合适的证书, 或者是缓存的证书认证失败, 此时客户端就会提示用户
+          输入用户名与密码.</para>
 
         <para>The Subversion developers recognize that on-disk caches
           of authentication credentials can be a security risk.  To