Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.
Hello, Our repositories are located local on the CVS server machine. We did some further tests with the result, that impersonation works fine as long as this is a local account on the member server, but fails if we use domain accounts. We also turned on security and object access auditing which shows the follwing results: during the command "CVS login" (CVSROOT is set to ":pserver:domain\user at s0188000ap3:/ev") First We see a success audit for the logon of the accounts Next we see several access deny events for the temp path defined for the CVS service. The domain account which is impersonated as FullControl all over the temp-path. The domain account could also successfull connect using other protocols (ntserver and sspi). Any suggestions? :-) ferry malzer tel.: +43(5)0100-15778 fax: +43(5)0100-915778 handy: +43(664) 817 05 49 mail: malzerf at spardat.at -----Ursprüngliche Nachricht----- Von: cvsnt-admin at cvsnt.org [mailto:cvsnt-admin at cvsnt.org]Im Auftrag von Tony Hoyle Gesendet: Montag, 11. November 2002 15:15 An: cvsnt at cvsnt.org cvsnt downloads at march-hare.com @CVSNT on Twitter CVSNT on Facebook Betreff: Re: [cvsnt] using pserver with cvsnt On Mon, 11 Nov 2002 13:53:08 +0100, "Malzer Ferdinand AS SD" <MalzerF at spardat.at> wrote: >The problem we see is very simple: After impersonation of the NT account = >you delete all handles to the just created tokens. From now on all file = >access failes, because you've told NT to use the created tokens via = You're only deleting the reference to the handles. The OS keeps its own internal reference so there's no need to keep it open. Impersonation works fine. You'll have a problem if your repository is on a network share - it is impossible use this form of impersonation across a network (as we don't have the required tokens & the OS doesn't give this information). Locally it will work OK (it's been working here for 2 years without a hitch). Tony