OK, I've answered my own question. However, I didn't have to copy any public keys to the server.
In one session, I run the following command
ssh -v -a -L 2401:localhost:2401 tunnel_at_cvs.dev.java.net
I provide it the password for tunnel.
Once that is running, I can issue cvs commands from another session. So, to login I execute
cvs -d :pserver:hildo_at_localhost:/cvs login
where hildo is my user name.
:) It's all good. Hopefully :)
[Message sent by forum member 'hildo' (hildo)]
http://forums.java.net/jive/thread.jspa?messageID=238374