Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.
On Tue, 12 Nov 2002 10:03:41 +0100, "Malzer Ferdinand AS SD" <MalzerF at spardat.at> wrote: >Hello, >Our repositories are located local on the CVS server machine. > >We did some further tests with the result, that impersonation works fine = >as long as this is a local account on the member server, but fails if we = >use domain accounts. >We also turned on security and object access auditing which shows the = >follwing results: > >during the command "CVS login" (CVSROOT is set to = >":pserver:domain\user at s0188000ap3:/ev") > >First We see a success audit for the logon of the accounts >Next we see several access deny events for the temp path defined for the = >CVS service. Make sure that SYSTEM has full access to the temp path also, otherwise it might not work (not sure why - somewhere in the depths of NT it still knows it was SYSTEM before it was impersonated and uses that). You're probably suffering a network authentication issue. On a domain account it probably tries to contact the PDC to verify the access. All our repositories are on the secondary DC anyway so we don't get this. Pserver impersonation is at best a hack - it works for most people, but there's no way to make it perfect. Unfortunately ssh (at least cygwin's version and probably all others) uses the same method so you wouldn't be able to go down that route either. If your domain is an Active Directory use gserver on the Unix clients as that'll be much easier to setup, and will work properly. Tony