[cvsnt] Authentication issue with SSPI and builds after 2048
bo.berglund at telia.com
Sat Aug 27 13:07:45 BST 2005
As reported before there seems to be an unsolved problem concerning
SSPI authentication in the later builds including the very last 2064.
It manifests itself as follows:
1) Sandbox checked out from a server running an older version of CVSNT
(2.0.41 for example).
2) CVSROOT used is in the form :sspi:user at server:/repo
As long as one uses a *client* CVSNT that is below build 2048 updates
and other operations on this sandbox work just fine (as they used to).
But updating the *client* side only to a later build, for example
build 2064 results in responses like this:
G:\Engineering\DelphiGUI>cvs log --FormBatch.pas
 No authority could be contacted for authentication.
If the *client* is switched back to an earlier cvsnt version (could be
done easily using WinCvs) then all operations work just fine.
If the CVSROOT string is changed to :sspi:server:/repo using the
ChangeCVSROOT macro in WinCvs then the operations again work just fine
with the latest builds. But then of course the account on the
workstation must also exist on the server, to circumvent this
requirement is the reason for the alternate format for sspi in the
It seems to me that CVSNT has lost its ability to reliably communicate
with a remote server using the user at server specification from about
build 2048. This should be possible to find since the change must be
It is a real pain because as users usually cannot influence the server
software version and conservative admins tend to "not touch what is
running good" the developers end up with an impossible situation.
(Bo Berglund, developer in Sweden)
More information about the cvsnt