[cvsnt] Re: Impersonation problem (Tony, please help)

[Bo Berglund]

Why changing the account under which CVSNT runs?
By default it installs as the local SYSTEM account and unless there are real
important issues about thta it should not be changed. As soon as another account
gets involved then you will have problems. It is considered a "Power User" setup
and not much help from us ordinary peers will be available...

/Bo


-----Original Message-----
From: Rolf Wilms [mailto:rwilms at csc.com]
Sent: den 4 juli 2003 12:16
To: cvsnt at cvsnt.org
Subject: [cvsnt] Re: Impersonation problem (Tony, please help)


> cvs [login aborted]: cvs_domain: Impersonation failed - configuration
> error.  Contact your System Administrator.

I've seen this error when running CVSNT under an account with unsufficient
rights.

> I made sure that the SYSTEM account is running the CVSNT service has the
> right to 'Create a token object'. I had to change the setting on the
> cvs server and the PDC to get it effective on the cvs_server.

I think there are more rights necessary, i.e. something like "Act as part of
the operating system". I'd suggest to grant all rights available, see if
this works and then revoke the rights added one after another to see which
are really required.

Regards,
Rolf

"Kai-Uwe Cohrt" <kuewchen at gmx.de> schrieb im Newsbeitrag
news:3F04B515.8030705 at gmx.de...
> (I put this message on the NG before, but unfortunately I could not find
> a solution myself so far and there was no answer yet, so I like to give
> it a second try)
>
> Hi,
>
> I am having trouble to logon to CVS using the PServer protocol and being
> part of a domain.
>
> Client: Windows XP Prof. - part of the domain
> CVS Server: Win 2000 - part of the domain
> PDC: Win 2000
>
> Error mesage:
>   Fatal error, aborting.
> cvs [login aborted]: cvs_domain: Impersonation failed - configuration
> error.  Contact your System Administrator.
>
> I made sure that the SYSTEM account is running the CVSNT service has the
> right to 'Create a token object'. I had to change the setting on the
> cvs server and the PDC to get it effective on the cvs_server.
>
> My cvsroot:
> set cvsroot=:pserver:pserveruser at cvs_server:/test
>
> The relevant line from the passwd file in repository /test:
> pserveruser:Ki4WcSl9eC166:cvs_domain
> cvs_domain is a user defined for the domain.
>
> Setting of config file:
> SystemAuth=no
>
> I also made sure the setting in CVSNT is to use domain users to
> authenticate pserver logons.
>
> What am I missing to configure?
>
> thanks for any help,
>
> Kai
>
> p.S.: SSPI works fine
>


_______________________________________________
cvsnt mailing list
cvsnt at cvsnt.org
http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt