[cvsnt] Re: CVSNT : can I mix domain users & local users ?

[Richard Bordoli]

Tony,

Sorry to be so slow on this but I really cannot get this to work as it did
before.

I have in CVSROOT\passwd:
user1::user1

... which I thought meant CVS user1 maps to user1 on the CVS server (locally
created Windows login id) ? 
With the above syntax I could impersonate user1 if I knew the Windows login
password:

cvs -d :pserver:user1 at rdseven:F:/wincvs/repository login
< enter Windows password >

This is what no longer works - i get:
CVS password: < enter Windows password >
Fatal error, aborting.
cvs [login aborted]: rdseven: no such user

I have "Use local users for pserver authentication instead of domain users"
NOT CHECKED becuase I need to have entries in CVSROOT\passwd of the form:

fredblogs:!RDIT

(RDIT is a Windows domain name)

I have also tried changing CVSROOT\config
1) #SystemAuth=
2) SystemAuth=yes
3) SystemAuth=no


... is this parameter still used or is it overriden by service settings ?

Can you help ? You assert that nothing has changed between releases but this
worked pre-upgrade and is now defintely not working.   Are there some new
new config settings somewhere that I have not got due to having an exisitng
CVS repository ?

How would you set up CVSNT 2.0.51d to allow:
1) Domain authentication for most users (they are logging in with either
sspi (implicit login) or pserver (explicit login) protocols)
2) local Windows or CVS server authentication - I don't mind which as long
as I can administer these passwords on the CVS server somehow...

Any help much appreciated....

-Richard.

-----Original Message-----
From: Tony Hoyle [mailto:tmh at nodomain.org]
Sent: 13 September 2004 12:54
To: cvsnt at cvsnt.org
Subject: Re: [cvsnt] Re: CVSNT : can I mix domain users & local users ?


Richard Bordoli wrote:

> There is a flag in control panel Advanced tab "Use local users for pserver
> authentication instead of domain users" and this seems to stop the syntax
I
> was using in passwd from working in the 2 cases....

You can't use domain syntax in workgroup mode (which is what this flag 
enables).  You probably don't want this in your case.

> before upgrade, I could:
> cvs passwd -a user1
> [ specify password twice ]
> this now creates a warning:
> cvs server: *WARNING* CVS user 'cn-user' will not be able to log in until
> they are aliased to a valid system user.

2.0.38 would have had this warning as it was added a long time ago.  All 
users must at least alias to a real system user otherwise they won't be 
able to log in.

> Even if I create user1 as a local windows user on server1 I cannot pserver
> login as user1...

You should create user1 as a user on the domain if you want to log in, 
or alias them to a user on the domain (your choice).  This is unchanged 
from 2.0.38 though....

Tony