[cvsnt] Windows 2000 File Permissions and remote access protocols

Jim B. none at none.com
Tue Aug 12 23:14:42 BST 2003


Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.


Thanks Glen. Your response is very helpful.

The CVS repository directory was created under the Administrator account.
The cvsservice and CVS Lock Service run as Windows Services, and thus are
owned by default by the SYSTEM user. SYSTEM evidently has insufficient
privileges to access the config file. When I changed the owner of the
service to administrator, I was able to
access the config file and use the pserver remote access method.

I also altered my "Impersonation" settings, as you mentioned. It was
necessary to turn impersonation off in order to get pserver to work using
the "passwd" and "writers" files method.

I followed Bo Berglund's excellent CVSNT Installation Background for the
most part, but creating the repository under the Administrator account is
evidently not a common approach.

Thank you once again for your help.

Yours truly,
Jim Bonang

"Glen Starrett" <grstarrett at cox.net> wrote in message
news:mailman.22.1060709773.590.cvsnt at cvsnt.org...
> > I'm having difficulty with remote access to my CVSNT (2.1.1)
> > repository under Windows 2000 Server.  I installed CVSNT as
> > Administrator. The CVS Service and Locking Service are
> > running.  "Server side support for ntserver protocol",
>
> FYI, ntserver is deprecated, the check isn't necessary.
>
> > "Impersonation", and "Use local users for pserver
> > authentication instead of domain users" are enabled. I've set
> > up access for user "anonymous" in the passwd file and in the
> > writers file in \CVSROOT for repository d:\cvsrepo\test2.
>
> I haven't tried anonymous acccess, but *I think* "Impersonation" and
> "local users... Pserver" means there needs to be a user called
> "anonymous" in your local server's user list, and you would then assign
> that user appropriate permissions to the files in your repository.  You
> can also alias anoymous to a different system name in the passwd file (I
> think it's -R when you do the cvs passwd command), so the NT username
> doesn't have to be the same as the pserver user name.
>
> You can uncheck the Use local users for pserver option and MAYBE the
> Impersonation if you don't want to create the local user at all.  I'm
> pretty unsure here though--maybe someone else can confirm.
>
> >
> > The same error message occurs when trying to access the
> > repository from a remote machine using the pserver protocol.
> > (When I use ntserver or sspi, the error indicates
> > "Authentication failed.")
>
> Those are trying to authenticate directly to the NT user list, and if
> anonymous isn't in there then they will never authenticate.
>
> >
> > I've removed the repository prefix setting in the CVSNT
> > control panel. I also tried setting SysAuth=no in the
> > \CVSROOT\config file. The Administrator user has full access
> > to the CVSROOT\config file, the cvstemp directory, etc.
> >
> > I tried to follow the instructions in the CVSNT Installation
> > Tips, but have evidently made an egregious error.
>
> This doesn't directly apply to your situation, but you can see how I set
> up my NTFS file permissions here (maybe it might help explain some
> things and help you understand what's going on in there):
> http://www.cvsnt.org/wiki/SetAcl
>
> >
> > (I haven't found any obvious equivalent to the unix/linux
> > inet.d --allow-root=<directory> CVS option for the Windows
> > version. Is there something similar that needs to be set on
> > Windows 2000?)
>
> I think that's "chroot jail" type stuff, not used in the more insecure
> Windows world :)
>
> >
> > Thank you very much for any assistance you can provide. (I've
> > used CVS under Linux without any trouble, but I'm not as
> > familiar as I should be with Windows Administration.)
>
> FYI, CVSNT runs under Linux too.
>
> Regards,
>
> Glen Starrett
>
>
>




More information about the cvsnt mailing list
Download the latest CVSNT, TortosieCVS, WinCVS etc. for Windows 8 etc.
@CVSNT on Twitter   CVSNT on Facebook