[cvsnt] What Rights are Needed by CVS-NT RunAsUser?

[Richard Coad at HQ x4263]

Unfortunately we have no choice. The hosted machine cannot have a login
account for every user so aliasing and pserver are the only option.  It's
not my first choice of setups, but I can only do what the PHBs tell me to
do.

Windows version: Microsoft Windows [Version 5.2.3790]

CVS NT Version: Concurrent Versions System (CVSNT) 2.5.02 (Servalan) Build
2115 (client/server)

Trace using pserver with alias:

C:\Documents and Settings\matson_cvs>cvs -ttt
-d:pserver:cis:cis123 at 10.201.0.7:/
cvs co CVSROOT
08:01:32:   -> Tracelevel set to 3.  PID is 2648
08:01:32:   -> Session ID is a58435f9a4c69e7
08:01:32:   -> Session time is Wed Oct 26 15:01:32 2005
08:01:32:   -> Domain found: CSCHOSTING
08:01:32:   -> CVS Server is acting as standalone
08:01:32:   -> CVS Directory is c:\PROGRA~1\cvsnt
08:01:32:   -> main loop with CVSROOT=:pserver:cis:cis123 at 10.201.0.7:/cvs
Fatal error, aborting.
cvs [checkout aborted]: CSCHOSTING\matson_cvs: no such user


I am logged in as matson_cvs and have that set as the RunAsUser.

Rich

-----Original Message-----
From: Arthur Barrett [mailto:arthur.barrett at march-hare.com] 
Sent: Tuesday, October 25, 2005 5:50 PM
To: Richard Coad at HQ x4263; cvsnt at cvsnt.org
Subject: RE: [cvsnt] What Rights are Needed by CVS-NT RunAsUser?

Richard,

If there is any trust at all between the CVSNT server box and the domain
controller / active directory then you are better not using RunAsUser and
not using PSERVER.  

PSERVER is insecure, particularly if the clients are Windows based then you
are better using SSPI.
http://march-hare.com/cvspro/security.htm

Please supply exact error messages, version numbers (CVSNT client/server,
Windows etc)  and a trace (cvs -ttt) for any bug reports.
http://march-hare.com/cvspro/faq/faq2.asp#2z


Regards,


Arthur Barrett




-----Original Message-----
From:	cvsnt-bounces at cvsnt.org on behalf of Richard Coad at HQ x4263
Sent:	Wed 10/26/2005 5:40 AM
To:	'cvsnt at cvsnt.org'
Cc:	
Subject:	[cvsnt] What Rights are Needed by CVS-NT RunAsUser?

I am attempting to get CVS NT configured on a managed Windows 2003 box.
Since it is a managed box, we want to restrict login accounts and use the
cvs passwd aliasing facility to alias cvs account names to the single
Windows user "cvsuser".  I've tested this out on my local box and it works
fine.  On the managed server, however, I get an error message from CVS that
the account "cvsuser" (or domain\cvsuser) does not exist.  If I login to the
managed server and run the command shell, I can successfully checkout just
using "cvs co CVSROOT" but if I use the pserver settings it fails with the
same message about "cvsuser" not existing.

The only thing I can think of is that the "cvsuser" account has been created
with insufficient rights.  What is the minimum required to have pserver
aliasing work?  Thanks.

Richard Coad
Senior Software Engineer
Matson NavigationCompany
Office:  (510) 628-4263
 
 

_______________________________________________
cvsnt mailing list
cvsnt at cvsnt.org
http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt