[cvsnt] Windows 2000 File Permissions and remote access protocols

Glen Starrett grstarrett at cox.net
Tue Aug 12 18:35:10 BST 2003


Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.


> I'm having difficulty with remote access to my CVSNT (2.1.1) 
> repository under Windows 2000 Server.  I installed CVSNT as 
> Administrator. The CVS Service and Locking Service are 
> running.  "Server side support for ntserver protocol", 

FYI, ntserver is deprecated, the check isn't necessary.

> "Impersonation", and "Use local users for pserver 
> authentication instead of domain users" are enabled. I've set 
> up access for user "anonymous" in the passwd file and in the 
> writers file in \CVSROOT for repository d:\cvsrepo\test2.

I haven't tried anonymous acccess, but *I think* "Impersonation" and
"local users... Pserver" means there needs to be a user called
"anonymous" in your local server's user list, and you would then assign
that user appropriate permissions to the files in your repository.  You
can also alias anoymous to a different system name in the passwd file (I
think it's -R when you do the cvs passwd command), so the NT username
doesn't have to be the same as the pserver user name.

You can uncheck the Use local users for pserver option and MAYBE the
Impersonation if you don't want to create the local user at all.  I'm
pretty unsure here though--maybe someone else can confirm.

> 
> The same error message occurs when trying to access the 
> repository from a remote machine using the pserver protocol.  
> (When I use ntserver or sspi, the error indicates 
> "Authentication failed.")

Those are trying to authenticate directly to the NT user list, and if
anonymous isn't in there then they will never authenticate.

> 
> I've removed the repository prefix setting in the CVSNT 
> control panel. I also tried setting SysAuth=no in the 
> \CVSROOT\config file. The Administrator user has full access 
> to the CVSROOT\config file, the cvstemp directory, etc.
> 
> I tried to follow the instructions in the CVSNT Installation 
> Tips, but have evidently made an egregious error.

This doesn't directly apply to your situation, but you can see how I set
up my NTFS file permissions here (maybe it might help explain some
things and help you understand what's going on in there):
http://www.cvsnt.org/wiki/SetAcl

> 
> (I haven't found any obvious equivalent to the unix/linux 
> inet.d --allow-root=<directory> CVS option for the Windows 
> version. Is there something similar that needs to be set on 
> Windows 2000?)

I think that's "chroot jail" type stuff, not used in the more insecure
Windows world :)

> 
> Thank you very much for any assistance you can provide. (I've 
> used CVS under Linux without any trouble, but I'm not as 
> familiar as I should be with Windows Administration.)

FYI, CVSNT runs under Linux too.

Regards,

Glen Starrett
 




More information about the cvsnt mailing list
Download the latest CVSNT, TortosieCVS, WinCVS etc. for Windows 8 etc.
@CVSNT on Twitter   CVSNT on Facebook