[cvsnt] Re: CVSNT authentication against OpenLDAP

[Tony Hoyle]

Andreas Tscharner wrote:
> Hello World,
> 
> I have the following situation:
> Server: Debian GNU/Linux, cvsnt
> Clients: Windows and Linux, cvs (cvshome.org) and/or cvsnt
> 
> I have installed OpenLDAP on the server. The system users are 
> authenticated against this server. Now, I want CVSNT to authenticate 
> also against the users in the OpenLDAP server.
> Two other requirements:
> 1) The user should have access to the CVSNT repositories, even if s/he 
> is not a system user (similar to the password (CVSROOT/passwd) file with 
> pserver, where I can make entries for users that have otherwise no 
> access to the system)

Set RunAsUser=nobody, and setup /etc/pam.d/cvsnt to authenticate users 
only in the openldap server.

> 2) Encryption is required

That's more limiting... if you're using cvshome clients with that setup 
you're limited to getting kerberos working and IIRC that has its own 
user list.

CVSNT clients can use sserver.

Tony