[cvsnt] Newbie: remote login with sspi

[Bo Berglund]

I might add to the below that there is in fact a possibility for using
the cvs login with SSPI. This is done like this:
1) Set the cvsroot to :sspi:user at server:/repository or in your case
   :sspi:kalifeh at 137.82.2.80:/test

2) Now issue a cvs login command from the client and fill in the
password dialogue with the Windows password of that user.

Note that the passwd file does not store any passwords in the sspi
case, it simply acts as a filter to tell which logins are allowed to
use CVS. And this only holds true fore some authentication settings
(don't remember how to set these).

Anyway, with the user at server setting for sspi it is possible to act as
another user than the logged on user when dealing with the CVS server.
But the user you disguise yourself as must still be a valid system
user on the server, either locally or on the domain.

/Bo


On Mon, 31 Mar 2003 19:52:33 -0300, "Alexandre Augusto Drummond
Barroso" <adrummond at bdmg.mg.gov.br> wrote:

>What do you mean by local user? Local to your machine or local to your network.
>With SSPI protocol, you *don't* login using login command. Cvs authenticates your connection using the windows login name. Usually a PDC (Primary Domain Controller) authenticates a user as being a valid network user (not a local user) if you login to the domain. Because of this situation, you don't need valid passwords inside your passwd: CVSNT will never use them with SSPI connections. It only checks passwords when connected through pserver or rhosts.
>Using SSPI when you issue a command to the cvs server, it authenticates your *Windows* connection and checks if your login name exists inside passwd file.
>
>Cheers,
>
>Xandao.
>
>> -----Original Message-----
>> From: Mike [mailto:kalifeh at hotmail.com]
>> Sent: Monday, March 31, 2003 7:27 PM
>> To: cvsnt at cvsnt.org
>> Subject: [cvsnt] Newbie: remote login with sspi
>> 
>> 
>> Hi,
>> 
>> Ive set up cvsnt on one computer running winXP and its 
>> working fine with
>> sspi for local users. Im not exactly sure however, how to 
>> access the cvsnt
>> server from a remote machine (also running winXP).
>> 
>> on the server i added the remote user to the repository 
>> passwd file with a
>> domain
>> >cvs passwd -D <client ip> -a matt
>> 
>> on the remote client i set the cvs root
>> >set cvsroot=:sspi:<server ip>:/test
>> 
>> and then try to login
>> >cvs login
>> and i get:
>> cvs [login aborted]: unrecognized auth response from 137.82.2.80 cvs
>> [server aborted]: Authentication failed
>> 
>> i have played with the SystemAuth variable in config. I also set
>> cvs_client_log on the client, but no output file is created.
>> 
>> Im probably doing things completely wrong, but i havent found 
>> a solution
>> online yet.
>> 
>> Thanks,
>> Mike
>> 
>> _______________________________________________
>> cvsnt mailing list
>> cvsnt at cvsnt.org
>> http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt
>> 


/Bo
(Bo Berglund, developer in Sweden)