[cvsnt] Impersonation problem (Tony, please help)

[Kai-Uwe Cohrt]

(I put this message on the NG before, but unfortunately I could not find 
a solution myself so far and there was no answer yet, so I like to give 
it a second try)

Hi,

I am having trouble to logon to CVS using the PServer protocol and being 
part of a domain.

Client: Windows XP Prof. - part of the domain
CVS Server: Win 2000 - part of the domain
PDC: Win 2000

Error mesage:
  Fatal error, aborting.
cvs [login aborted]: cvs_domain: Impersonation failed - configuration 
error.  Contact your System Administrator.

I made sure that the SYSTEM account is running the CVSNT service has the 
right to 'Create a token object'. I had to change the setting on the 
cvs server and the PDC to get it effective on the cvs_server.

My cvsroot:
set cvsroot=:pserver:pserveruser at cvs_server:/test

The relevant line from the passwd file in repository /test:
pserveruser:Ki4WcSl9eC166:cvs_domain
cvs_domain is a user defined for the domain.

Setting of config file:
SystemAuth=no

I also made sure the setting in CVSNT is to use domain users to 
authenticate pserver logons.

What am I missing to configure?

thanks for any help,

Kai

p.S.: SSPI works fine