[cvsnt] pserver authorization problems

David Jackman David.Jackman at fastsearch.com
Tue Jan 10 17:54:20 GMT 2006


Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.


I was able to get things running on my server.  I uninstalled, cleaned
out the registry settings, then installed again.  I didn't pursue the
domain users again due to the constant discouragement from people
smarter than me.  Before I wasn't able to get *any* (even non-domain)
users to work with pserver.  Now I can.  One thing I noticed after
re-installing is that the default domain setting (in server settings) is
set to blank by default.  With my first install, I'd set it to the
domain all the users were coming from.  Blank is probably the value I
want (especially if I'm not using domain users).  However, in the
settings dialog there is no way to choose a blank value once it's been
set to something else.  If blank is really an option (the one that
works, no less!), then  it ought to be available all the time.  I
haven't tried changing the default domain to something to prove that it
was the cause of my problems because I can't change it back afterwards.

..David..


-----Original Message-----
From: cvsnt-bounces at cvsnt.org [mailto:cvsnt-bounces at cvsnt.org] On Behalf
Of Bo Berglund
Sent: Saturday, January 07, 2006 9:27 AM
To: cvsnt at cvsnt.org cvsnt downloads at march-hare.com @CVSNT on Twitter CVSNT on Facebook
Subject: Re: [cvsnt] pserver authorization problems

On Sat, 7 Jan 2006 08:26:29 -0700, "David Jackman"
<David.Jackman at fastsearch.com> wrote:

>I started playing around with the CVSNT server settings and found that 
>if I change the "Run as user" setting from "(client user)" to a named 
>user account on that server machine (doesn't seem to matter which user 
>I use), then pserver works for all users.

I would not do this at all, because it limits the ability for you to
sett access priviliges inside the repository using the NTFS file
permissions for users and groups. For pserver this might be OK but for
SSPI it is definitely not and the setting is server global!

When you use pserver (or better sserver) you should really alias all cvs
logins to some special account. This way the users do not need to expose
their domain passwords to the insecure pserver transfer mechanism at
all.
Their CVS login is then valid ONLY for CVS and it is a much more secure
system.

See here for advice on how to do this:
http://web.telia.com/~u86216177/InstallCVSNT25.html#PserverUsers



/Bo
(Bo Berglund, developer in Sweden)
_______________________________________________
cvsnt mailing list
cvsnt at cvsnt.org cvsnt downloads at march-hare.com @CVSNT on Twitter CVSNT on Facebook
http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt https://www.march-hare.com/cvspro/en.asp#downcvs



More information about the cvsnt mailing list
Download the latest CVSNT, TortosieCVS, WinCVS etc. for Windows 8 etc.
@CVSNT on Twitter   CVSNT on Facebook