[cvsnt] using pserver with cvsnt

Tony Hoyle tmh at nodomain.org
Tue Nov 12 12:23:55 GMT 2002


Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.


On Tue, 12 Nov 2002 10:03:41 +0100, "Malzer Ferdinand AS SD"
<MalzerF at spardat.at> wrote:

>Hello,
>Our repositories are located local on the CVS server machine.
>
>We did some further tests with the result, that impersonation works fine =
>as long as this is a local account on the member server, but fails if we =
>use domain accounts.
>We also turned on security and object access auditing which shows the =
>follwing results:
>
>during the command "CVS login" (CVSROOT is set to =
>":pserver:domain\user at s0188000ap3:/ev")
>
>First We see a success audit for the logon of the accounts
>Next we see several access deny events for the temp path defined for the =
>CVS service.

Make sure that SYSTEM has full access to the temp path also, otherwise
it might not work (not sure why - somewhere in the depths of NT it
still knows it was SYSTEM before it was impersonated and uses that).

You're probably suffering a network authentication issue.  On a domain
account it probably tries to contact the PDC to verify the access.
All our repositories are on the secondary DC anyway so we don't get
this.

Pserver impersonation is at best a hack - it works for most people,
but there's no way to make it perfect.  Unfortunately ssh (at least
cygwin's version and probably all others) uses the same method so you
wouldn't be able to go down that route either.  

If your domain is an Active Directory use gserver on the Unix clients
as that'll be much easier to setup, and will work properly.

Tony




More information about the cvsnt mailing list
Download the latest CVSNT, TortosieCVS, WinCVS etc. for Windows 8 etc.
@CVSNT on Twitter   CVSNT on Facebook