[cvsnt] sspi rejects access when nt domain password changes

Ryan Melville ryan_melville at soniqcastREMOVE.com
Fri Jan 30 15:51:19 GMT 2004


Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.


Ok, I think I figured out my problem and so will  post the solution for
posterity:

The Windows client was not providing my user logon information to WinCVS
correctly and so it could not provide it to the CVSNT server correctly.

I had to go perform the following steps, which I found here:
http://www.theeldergeek.com/save_passwords_in_outlook.htm







Remove User Account Information
  a.. Click Start, click Run, type regedit in the Open box, and then click
OK.
  b.. Navigate to and select: HKEY_CURRENT_USER \ Software \ Microsoft \
Protected Storage System Provider
  c.. Right click Protected Storage System Provider and select Permissions
  d.. Click the user name for the user that is currently logged on and
ensure that Read and Full Control permissions are both set to Allow.
  e.. Click Advanced button, select the Permissions tab.
  f.. Ensure that the currently logged on user is highlighted, that Full
Control is listed in the Permissions column, and that This Key and Subkeys
is listed in the Apply To column.
  g.. Ensure that Replace Permission Entries on all Child Objects with
Entries Shown Here that Apply to Child Objects has a checkmark in the box.
  h.. Click Apply then click Yes in the Security dialogue box shown below.
  a.. Click OK, then click OK again to return to Registry Editor.
  b.. Expand the Protected Storage System Provider key by double clicking or
using the plus (+) sign.
  c.. Right click the user sub-key folder directly below the Protected
Storage System Provider key.
  a.. Click Delete and then click Yes in the Confirm Key Delete dialog box
that appears.
  a.. Close Registry Editor and reboot the computer




Then it all worked like magic.



Ryan








"Ryan Melville" <ryan_melville at soniqcastREMOVE.com> wrote in message
news:bvbenf$u7k$1 at sisko.local.nodomain.org...
> Hi Hakan,
>
> Have you learned any more about this?  I too changed my domain password
and
> now WinCVS give me this:
> cvs -x log source.cpp (in directory C:\Sw\)
>
> cvs [log aborted]: unrecognized auth response from cvs: cvs [server
> aborted]: Authentication failed
>
>
> When I, for example, try to get the revision graph for a file.
>
> On the client I have rebooted, used Logout and Login successfully
(supplied
> new password to WinCVS during Login).  I also made sure the
> HKEY_CURRENT_USER\Sofware\Cvsnet\cvspass registry key was empty and tried
> again.
>
> On the CVSNT server I've stopped and restarted the services to no avail.
>
> If you found any more information I would appreciate the tip as I'm stuck!
>
> [CVSNT 2.0.8; WinCVS 1.3.13.1; Windows Server 2003; Windows XP Pro; SSPI]
>
> Thanks,
> Ryan
>
>
>
>
> "Hakan Dilek" <hdilek at eng.marmara.edu.tr> wrote in message
> news:mailman.11.1074666302.472.cvsnt at cvsnt.org...
> > cvsnt 2.0.14,
> >
> >
> >       I  am  using  sspi  protocol  authenticating with NT domain user
> >       accounts.  but,  when  a  user changes his domain user password,
> >       authentication  with  the sspi protocol fails with the following
> >       message:
> >
> >       cvs [commit aborted]: unrecognized auth response from istk023a:
> >       cvs [server aborted]: Authentication protocol rejected access
> >
> >       Meanwhile,  the  following  event  is  written  in  the  servers
> >       security logs:
> >
> > Event Type:     Failure Audit
> > Event Source:   Security
> > Event Category: Logon/Logoff
> > Event ID:       529
> > Date:           20.01.2004
> > Time:           10:10:58
> > User:           NT AUTHORITY\SYSTEM
> > Computer:       ********
> > Description:
> > Logon Failure:
> >         Reason:         Unknown user name or bad password
> >         User Name:      ********
> >         Domain:         **********
> >         Logon Type:     3
> >         Logon Process:  NtLmSsp
> >         Authentication Package: NTLM
> >         Workstation Name:       PCOKSUZ
> >
> >
> >       The  computer  that  is cvsnt is running on, is a domain member,
> >       that user accounts are stored in.
> >
> >       I  think passwords are stored in somewhere persistently, because
> >       restarting  the service does not release them. Is there a way to
> >       reset passwords?
> >
> > This e-mail was scanned by Antivirus.
>
>





More information about the cvsnt mailing list
Download the latest CVSNT, TortosieCVS, WinCVS etc. for Windows 8 etc.
@CVSNT on Twitter   CVSNT on Facebook