[cvsnt] SSPI Access denied problems [was: Access denied looking up C:/Data/cvsrepo]

Scott Whitney ScottWhitney at DesignMentor.com
Wed Aug 18 16:33:44 BST 2004


Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.


Hi Mike,

No, there is no passwd file in C:\Data\cvsrepo\CVSROOT.

The contents of C:\Data\cvsrepo\CVSROOT\config are as follows:

# Set this to `no' if pserver shouldn't check system users/passwords
#SystemAuth=yes

# Put CVS lock files in this directory rather than directly in the repository.
# (Depreciated.  Only honoured if LockServer=none)
#LockDir=/var/lock/cvs

# Alternate location of CVS LockServer.  Set to 'none' to disable..
#LockServer=localhost:2402

# Set `TopLevelAdmin' to `yes' to create a CVS directory at the top
# level of the new working directory when using the `cvs checkout'
# command.
#TopLevelAdmin=no

# Set `LogHistory' to `all' or `TOFEWGCMAR' to log all transactions to the
# history file, or a subset as needed (ie `TMAR' logs all write operations)
#LogHistory=TOFEWGCMAR

# Set `RereadLogAfterVerify` to control rereading of the log file after a verifymsg
#   `always` or `yes` to always reread the log regardless
#   `never` or `no` (default) to never reread the log
#RereadLogAfterVerify=no

As you can see, everything is commented out, so we should be using the "defaults".  My understanding is that the SystemAuth setting defaults to yes, but I'm not sure about the default setting for LockServer.

Does this shed any light on the possible problem?

Thanks,

--Scott

-----Original Message-----
From: Mike Wake [mailto:mike.wake at thales-tts.com]
Sent: Wednesday, August 18, 2004 10:24 AM
To: Scott Whitney
Cc: CVS-NT Mailing list (E-mail)
Subject: Re: [cvsnt] SSPI Access denied problems [was: Access denied
looking up C:/Data/cvsrepo]


Hi Scott,

Do you have a passwd file in your C:/Data/cvsrepo/CVSROOT?

What is the contents of your C:/Data/cvsrepo/CVSROOT/config file?

Any virus scanners running?

Cheers
Mikew


Scott Whitney wrote:

> Hi Mike,
> 
> Thanks for your help.  Yes, the server name is "files", and yes, the 
> temporary directory is set to be C:/Data/cvstemp within the CVSNT 
> applet.
> 
> I tried "cvs -d :sspi:files/cvsrepo login, and it worked fine:
> 
> C:\Program Files\cvsnt>cvs -d :sspi:files:/cvsrepo login
> Logging in to :sspi:ScottWhitney at files:2401:/cvsrepo
> CVS password: *********
> 
> However, this still fails:
> 
> C:\Program Files\cvsnt>cvs -d :sspi:files:/cvsrepo ls
> cvs server: Access denied looking up C:/Data/cvsrepo - results may not 
> be correct
> 
> I also tried it again with my username, and got the same response:
> 
> C:\Program Files\cvsnt>cvs -d :sspi:ScottWhitney at files:/cvsrepo ls
> cvs server: Access denied looking up C:/Data/cvsrepo - results may not 
> be correct
> 
> I can also logout:
> 
> C:\Program Files\cvsnt>cvs -d :sspi:files:/cvsrepo logout
> Logging out of :sspi:ScottWhitney at files:2401:/cvsrepo
> 
> So, the port number seems to be correct, I'm allowed to login and 
> logout, but I can't do anything with the repository.  Do you have any 
> other suggestions on how I can debug this?  
> 
> I've read a few questions where turning on tracing was suggested with 
> -t -t -t.  I tried that and got the following:
> 
> C:\Program Files\cvsnt>cvs -t -t -t -d :sspi:files:/cvsrepo ls
>   -> Tracelevel set to 3.  PID is 3884
>   -> Session ID is f2c41235dbd3ad9
>   -> main loop with CVSROOT=:sspi:files:/cvsrepo
>   -> Requesting server cvsignore
> cvs server: Access denied looking up C:/Data/cvsrepo - results may not 
> be correct
> 
> Not too much helpful info there...  I've also read a suggestion about 
> turning on "auditing" on the server to see what is happening, but I'm 
> not really a server administrator, so I'd need some help for our IT 
> guys for this.
> 
> Many thanks for your time and good suggestions!
> 
> --Scott
> 
> 
> 
> -----Original Message-----
> From: Mike Wake [mailto:mike.wake at thales-tts.com]
> Sent: Wednesday, August 18, 2004 9:17 AM
> To: Scott Whitney
> Cc: CVS-NT Mailing list (E-mail)
> Subject: Re: [cvsnt] SSPI Access denied problems [was: Access denied
> looking up C:/Data/cvsrepo]
> 
> 
> Hi Scott
> 
> Some things to try.
> I assume the name of your server is "files"? Is this correct?
> 
> If so
> Have you tried getting the user to login using their domain password.
> ie
> cvs -d :sspi:files:/cvsrepo login
> or
> cvs -d :sspi:username at files:/cvsrepo login
> 
> and then try
> cvs -d :sspi:files:/cvsrepo login
> or
> cvs -d :sspi:username at files:/cvsrepo ls
> 
> 
> Is the temporary directory set to be C:/Data/cvstemp within the CVSNT 
> applet?
> 
> 
> Cheers
> Mikew
> 
> Scott Whitney wrote:
> 
> 
>>Hi CVSNT users and gurus,
>>
>>I haven't received any advice on this problem, and I'm really stuck.  I'm reposting it with a little clarification, because I think this is some type of basic SSPI problem or a domain permissions problem.
>>
>>I have CVSNT 2.0.51a installed on our Windows 2000 Server.  I read all the FAQs I could find and sorted through many back postings.  I have created a repository on C:\Data\cvsrepo, and the CVSNT applet was able to initialize it.  I also created a temporary directory in C:\Data\cvstemp.  The members of my software group have been given Full rights to both of these directories.  The repository name as set in the CVSNT applet is /cvsrepo.  Both the server and lockdir services are running.
>>
>>The remainder of my initial post follows, but basically if I'm logged in as the domain administrator and type "cvs -d :sspi:files:/cvsrepo ls", the command works correctly.
>>
>>However, if I try to log in as one of the users with Full access and issue the same command, "cvs -d :sspi:files:/cvsrepo ls", I always get an error message:
>>
>>cvs server: Access denied looking up C:/Data/cvsrepo - results may not be correct
>>
>>Typing "cvs info" shows me that the :sspi: protocol is available.  I have tried these same commands with CVSNT clients 2.0.41a (from the WinCVS 1.3 distribution), and 2.0.51a, and the results are the same.
>>
>>I'm assuming that this is some kind of permissions problem.  Can anyone provide some advice?  We're really desperate to get this working, and I'd hate to have to switch to some other VCS over what should be such a simple problem.
>>
>>Best regards, and thanks!
>>
>>--Scott
>>
>><Original posting>
>>
>>I have CVSNT version 2.0.41a running on a client (from WinCVS 1.3), and the server has been set up with version 2.0.51a.  The server appears to be running correctly, and I gave the users in my software group full control for the C:\Data\cvstemp directory and C:\Data\cvsrepo directories on my server.  The repository name is just /cvsrepo.
>>
>>On the server while logged in as an administrator, this works fine:
>>
>>cvs -d :sspi:files:/cvsrepo ls
>>
>>On my client, logged in via our domain server, I keep getting the error:
>>
>>C:\Program Files\GNU\WinCvs 1.3\CVSNT>cvs -d :sspi:files:/cvsrepo ls
>>cvs server: Access denied looking up C:/Data/cvsrepo - results may not be correct
>>
>>Also on my client, the command "cvs info" returns the following:
>>
>>C:\Program Files\GNU\WinCvs 1.3\CVSNT>cvs info
>>Available protocols:
>>
>>local               (internal)
>>ext                 ext 2.0.41a
>>pserver             pserver 2.0.41a
>>server              server 2.0.41a
>>sserver             sserver 2.0.41a
>>ssh                 ssh 2.0.41a
>>sspi                sspi 2.0.41a
>>
>>So, it looks like the sspi protocol should be available.
>>
>>Does anyone know why we keep getting the error "cvs server: Access denied looking up C:/Data/cvsrepo - results may not be correct"
>>
>>--Scott
>>Scott D. Whitney  ScottWhitney_at_DesignMentor.com
>>_______________________________________________
>>cvsnt mailing list
>>cvsnt at cvsnt.org cvsnt downloads at march-hare.com @CVSNT on Twitter CVSNT on Facebook
>>http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt https://www.march-hare.com/cvspro/en.asp#downcvs
> 
> 



More information about the cvsnt mailing list
Download the latest CVSNT, TortosieCVS, WinCVS etc. for Windows 8 etc.
@CVSNT on Twitter   CVSNT on Facebook