[cvsnt] Authentication issue with SSPI and builds after 2048

Bo Berglund bo.berglund at telia.com
Sat Aug 27 13:07:45 BST 2005

As reported before there seems to be an unsolved problem concerning
SSPI authentication in the later builds including the very last 2064.
It manifests itself as follows:

1) Sandbox checked out from a server running an older version of CVSNT
(2.0.41 for example).
2) CVSROOT used is in the form :sspi:user at server:/repo

As long as one uses a *client* CVSNT that is below build 2048 updates
and other operations on this sandbox work just fine (as they used to).

But updating the *client* side only to a later build, for example
build 2064 results in responses like this:

G:\Engineering\DelphiGUI>cvs log --FormBatch.pas
[80090311] No authority could be contacted for authentication.

If the *client* is switched back to an earlier cvsnt version (could be
done easily using WinCvs) then all operations work just fine.

If the CVSROOT string is changed to :sspi:server:/repo using the
ChangeCVSROOT macro in WinCvs then the operations again work just fine
with the latest builds. But then of course the account on the
workstation must also exist on the server, to circumvent this
requirement is the reason for the alternate format for sspi in the
first place...

It seems to me that CVSNT has lost its ability to reliably communicate
with a remote server using the user at server specification from about
build 2048. This should be possible to find since the change must be
rather recent.

It is a real pain because as users usually cannot influence the server
software version and conservative admins tend to "not touch what is
running good" the developers end up with an impossible situation.

(Bo Berglund, developer in Sweden)

More information about the cvsnt mailing list