[cvsnt] Re: After upgrade CVSNT requires domainname in username

Tony Hoyle tmh at nodomain.org
Mon May 2 16:02:43 BST 2005


Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.


Luigi D. Sandon wrote:
> But we have a few portable PC which came with XP Home that should log in 
> using pserver. I can't get it to work if Run As User is set to [client 
> user]. I get some "access denied" error, i.e. creating file in the temp 
> dir. I tried to alias the pserver login to different domain accounts - 
> all of them have access to the directories - no way. The default domain 
> is set to the domain name.

There's nothing to stop the XP Home machines using SSPI...  they need to 
specify a username (since XP Home isn't able to be a proper domain 
member and always logs in as guest) but it's much simpler.

The user needs write access to the temp directory, and of course access 
to the directory itself (read/traverse).

Your error suggests that the pserver users you are logging on with are 
either not logging into the accounts you think they are (local users 
rather than domain users), or that they don't actually have permissions 
for the directory.  Check your audit logs as this will tell you exactly 
what the prooblem is.

> I do not understand if a pserver account should be aliased to a "local 
> account" which a DC does not have (only domain accounts), or if it could 
> be aliased to domain accounts too.

Actually a DC only has local accounts.. from a software point of view 
the domain is something that's created on other machines not the DC 
(it's more complex on Active Directory forests, but not by much).

> In general, the explanation on how to setup pserver accounts (and 
> accounts in general) is still clumsy in the documentation and too 
> Unix-oriented, while CVSNT is often used in Windows environments.

It's pretty much the same on Unix if you want to start doing things 
manually.

I'd recommend not doing anything though and just using the default 
setup..  CVSROOT/passwd doesn't gain you anything if you're just adding 
domain users to it, and may as well be deleted (there are reasons for 
it, such as using different passwords for the pserver and domain for 
security reasons, but if you're after security encrypted SSPI is a 
better bet).

Tony



More information about the cvsnt mailing list
Download the latest CVSNT, TortosieCVS, WinCVS etc. for Windows 8 etc.
@CVSNT on Twitter   CVSNT on Facebook