[Cvsnt] how to set up user-aliases ? - still not working

[Bo Berglund]

Matthias,
there are a few things to still be careful about:
1) As far as I have seen you must do everything in a single command, this means
to create the login, set the alias and password all at once. This is how I would
have done it:
C:\>set cvsroot=:ntserver:<servermachinename>:C:/BaseDir/Repository
C:\>cvs passwd -r MyNTUser -a MyCVSlogin
New password:*******
Verify password:*******

After this the passwd file would look like:
MyCVSlogin:#@k7r3!fgrwk:MyNTUser
Where the first part is the new cvs login and the middle part is the cvs password
(encrypted) for this login and the third part is the valid NT user login to be used
as alias when MyCVSlogin connects.

Notes:
- cvs passwd cannot change the domain password of any account it only deals with the
  cvs login passwords, which are only used by cvs.
- When you enter a new cvs login it must be a valid NT login or you must supply the
  login name of a valid NT account
- when cvs accepts a pserver login it only checks the name and password then if OK it
  checks if there is an alias associated with the login. If there is an alias it will
  use that account for operations otherwise it will look for an NT account by the same
  name as the cvs login and use that. This is why it must exist or be aliased.
- in no case will cvs use any login procedure involving the system passwords to be able
  to use the original or aliased account. It simply uses it since it runs as the SYSTEM
  with all priviliges.

What I see you are trying to do that is not what I would do is:
== You use :local: mode, I would use ntserver mode
== You are first adding a user then aliasing it, I would do both in the same command
== You are trying to use the domain password for cvs login, this will not work
   you must use the cvs password given during the cvs login setup


/Bo

-----Original Message-----
From: Matthias Mohr [mailto:MMohr at SysDesign-EDV.de]
Sent: den 2 april 2002 11:11
To: cvsnt at cvsnt.org
Subject: Re: [Cvsnt] how to set up user-aliases ? - still not working


Now I tested your version, but it still does not work as I think it should :-(

This is what I did (lines with "C:\>" in front are the commands, the other are
the output of the CVS-command):

Directly at the CVS-Server-Machine (NT4-Domainserver):
--------------------------------------------------------------------------------------
  C:\> cvs -d :local:C:\BaseDir\Repository passwd -a MyAlias
  Adding user MyAlias at cvs.domain.com
  New password: irgendwas
  Verify password: irgendwas
  cvs passwd: *WARNING* CVS user 'MyAlias' will not be able to log in until they are
   aliased to a valid system user.
  C:\> cvs -d :local:C:\BaseDir\Repository passwd -r MyUser -D MyDomain MyAlias
  Changing password for MyAlias
   C:\>
--------------------------------------------------------------------------------------

After that the passwd-file in the CVSROOT-directory looks like follows:
  MyAlias:!MyDomain:MyUser

MyUser is a valid NT-Domain-User in the domain MyDomain.
Now I should be able to login in as "MyAlias" with the password of "MyUser" or not ?

Here is the output at the client machine (C:\BaseDir is removed from repositories at CVSNT-Services):
--------------------------------------------------------------------------------------
  C:\> cvs -d :pserver:MyAlias at cvs.domain.com:/Repository login
  Logging in to :pserver:MyAlias at cvs.domain.com:2401/Repository
  CVS password: ValidDomainPassword
  cvs [login aborted]: authorization failed: server cvssrv.sysdesign.loc rejected
  access to /Repository for user MyAlias
  C:\> cvs -d :pserver:MyAlias at cvs.domain.com:/Repository login
  Logging in to :pserver:MyAlias at cvs.domain.com:2401/Repository
  CVS password: irgendwas
  cvs [login aborted]: authorization failed: server cvssrv.sysdesign.loc rejected
  access to /Repository for user MyAlias
  C:\> cvs -d :pserver:MyUser at cvs.domain.com:/Repository login
  Logging in to :pserver:MyUser at cvs.domain.com:2401/Repository
  CVS password: ValidDomainPassword

  C:\>
--------------------------------------------------------------------------------------

As you can see, I'm able to login as valid NT-Domain-User with his Domain-Password, but I'm
not able to login with the alias-name...

What am I doing wrong ????

BTW: if I try to change the password of the Domain-User the following happens:
--------------------------------------------------------------------------------------
  C:\> cvs -d :pserver:MyUser at cvs.domain.com:/Repository passwd
  Changing password for MyUser at cvs.domain.com
  New password: irgendwas
  Verify password: irgendwas
  cvs [passwd aborted]: end of file from server (consult above messages if any)

  C:\>
--------------------------------------------------------------------------------------

I don't think this should happen ?!

with regards,
Matthias



_______________________________________________
Cvsnt mailing list
Cvsnt at cvsnt.org
http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt
_______________________________________________
Cvsnt mailing list
Cvsnt at cvsnt.org
http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt