[cvsnt] new users via :ntserver protocol

Bo Berglund Bo.Berglund at system3r.se
Thu Mar 13 08:13:48 GMT 2003


Yes,
the ntserver protocol will allow access from any valid domain user.
You can limit access using the NTFS file system permissions on the
repository files, though.
Use usergroups to achieve this.
passwd is normally only used for pserver access.
Please observe that the ntserver protocol is on the way out, you
should start using sspi instead. Works tha same way to the clients,
just replace ntserver with sspi in the cvsroot. But it operates over
TCP/IP so it can be rouuted and firewalled.
/Bo

-----Original Message-----
From: Jasmeet [mailto:virdi at softhome.net]
Sent: den 13 mars 2003 08:54
To: cvsnt at cvsnt.org
Subject: [cvsnt] new users via :ntserver protocol


Hi all,
    I am not sure whether this concen has been raised earlier, so i am
posting it. I installed the latest version of CVSNT using the installation
steps. In order to use it using Domain security, so that the repository is
only accessible to particular users of one domain, i added users using the
command "cvs passwd -a -r angelo -D theworld angelo". This enabled the user
theworld\angelo to access my repository !! There is no security involved
here ? likewise any person who know the name of the cvs server and the path
to the repository can add himself and modify the source code.
    Anybody got any alterntives for this ? or is the NTSERVER protocol
supposed to behave in this fashion (allowing all users of one domain to get
in ??)
    Please clarify.

thanx
-jasmeet


_______________________________________________
cvsnt mailing list
cvsnt at cvsnt.org
http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt


More information about the cvsnt mailing list