[cvsnt] Windows "guest" account and impersonation

[Mihnea Balta]

Oh, I'm sorry, I've got it wrong... I misunderstood "impersonation". I've
created my users with the cvs passwd command (which added them in
CVSROOT/passwd) and set SystemAuth=no in the CVSROOT/config file and now it
behaves like I wanted it to. Btw, setting file permissions was not an
option, since I must keep the repository on a fat32 filesystem (don't ask
:) ). Still, I think that CVSNT shouldn't allow disabled accounts to login
(when it falls back to system authentication).

----- Original Message -----
From: "pvgoran" <pvgoran.ml at macondo.ru>
To: "Mihnea Balta" <dark_lkml at mymail.ro>
Sent: Saturday, January 31, 2004 4:11 PM
Subject: Re: [cvsnt] Windows "guest" account and impersonation


>
> Hello Mihnea,
> Saturday, January 31, 2004, 7:40:26 PM, you wrote:
>
> MB> Hello,
>
> MB> I'm  currently  running a CVSNT server on Windows XP with
impersonation
> MB> enabled,  and  I've  come across this problem: I can login into the
cvs
> MB> repository  as  "guest"  and  no password, even if the guest account
is
> MB> disabled.  Since  Microsoft  decided  to  power  their XP with the
most
> MB> retarded user management interface ever, I can't set a password on
this
> MB> account,  nor  delete  it.  I  have to keep the cvs service open to
the
> MB> internet,  but  since it's a private project, I can't allow any kind
of
> MB> "guest"  access into it. Is there any way to solve this, besides
moving
> MB> the  repository to a linux machine or use an authentication scheme
that
> MB> does not involve impersonation?
> You  can  just disallow the "guest" user to access your repository by
using
> appropriate   file   system   permisions.   The   documentation   has
some
> recommendations on this subject.
>
> Alternatively,  you can set "SystemAuth=no" in CVSROOT/config, this
(AFAIK)
> would  disable  pserver  access  for  all  users  except  those  listed
in
> CVSROOT/passwd.  (I'm  not  sure however if it works for SSPI and other
non
> pserver/sserver protocols.)
>
> Pavel Goran
>
>
>
> ---------------------------------------------------------------
> Cauta-ti perechea pe http://dating.acasa.ro
>
>