Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.
Oh, I'm sorry, I've got it wrong... I misunderstood "impersonation". I've created my users with the cvs passwd command (which added them in CVSROOT/passwd) and set SystemAuth=no in the CVSROOT/config file and now it behaves like I wanted it to. Btw, setting file permissions was not an option, since I must keep the repository on a fat32 filesystem (don't ask :) ). Still, I think that CVSNT shouldn't allow disabled accounts to login (when it falls back to system authentication). ----- Original Message ----- From: "pvgoran" <pvgoran.ml at macondo.ru> To: "Mihnea Balta" <dark_lkml at mymail.ro> Sent: Saturday, January 31, 2004 4:11 PM Subject: Re: [cvsnt] Windows "guest" account and impersonation > > Hello Mihnea, > Saturday, January 31, 2004, 7:40:26 PM, you wrote: > > MB> Hello, > > MB> I'm currently running a CVSNT server on Windows XP with impersonation > MB> enabled, and I've come across this problem: I can login into the cvs > MB> repository as "guest" and no password, even if the guest account is > MB> disabled. Since Microsoft decided to power their XP with the most > MB> retarded user management interface ever, I can't set a password on this > MB> account, nor delete it. I have to keep the cvs service open to the > MB> internet, but since it's a private project, I can't allow any kind of > MB> "guest" access into it. Is there any way to solve this, besides moving > MB> the repository to a linux machine or use an authentication scheme that > MB> does not involve impersonation? > You can just disallow the "guest" user to access your repository by using > appropriate file system permisions. The documentation has some > recommendations on this subject. > > Alternatively, you can set "SystemAuth=no" in CVSROOT/config, this (AFAIK) > would disable pserver access for all users except those listed in > CVSROOT/passwd. (I'm not sure however if it works for SSPI and other non > pserver/sserver protocols.) > > Pavel Goran > > > > --------------------------------------------------------------- > Cauta-ti perechea pe http://dating.acasa.ro > >