Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.
Hello there!
I'm currently trying to move over our old cvs repo to cvsnt.
I installed the RH9 2.0.58d rpm from cvsnt.org and are now puzzled
with some problems:
First thing: The only connection method which is allowed should be
:ext:, so I disabled the pserver in xinetd. Is there any way to enable/
disable other compiled-in methods explicitely through some config file?
What other connection method could be used e.g. for windows users, is
:sspi: possible on Linux?
Secondly, I created two user groups: cvsadmins and cvsusers. In my
thoughts all normal modules should be owned by cvsusers, cvsadmins
would only own the CVSROOT dir (history, val-tags and EmptyDir would be
owned by cvsusers, too, since they need to be writable). Then I set the
permissions for each file/ directory that way that single users as well
as group users had read/write access to the specific file/ dir via chmod
775/664. I did some test commits under various logins and noticed that
the dir and file permissions I set are ignored by cvs. Each file which
is committed gets 444 permissions, obviously I already "hacked" an alias
in /etc/profile
alias cvs="umask 002;cvs"
which should make cvs create new files with group-read-write
permissions. Now, its not too bad that commits from other users do not
fail even if the file is not group-writable, but its a problem for the
CVSROOT-directory where really *only* admins should be able to commit
changes.
I know that there are access control ways via passwd and group, but
since the users connect via ssh which needs a valid Linux user account
I thought of minimizing the administrative overhead (I have to move
about 15 repositories, each contains commit and loginfo scripts) and not
add users into cvs via `cvs passwd`.
I don't even know if the build-in access control thing (via readers,
writers, admin and group file) works at all when
not using :pserver: - you can correct me on this point.
What is a good way to go? I just need *detailed* help...
Thank you guys in advance.
--
Best regards | Mit freundlichen Grüßen
Thomas Keller.
inatec solutions GmbH, Public Key 0x94A5F429