[cvsnt] RE: Question regarding SetACL cmd script for resetting CVSNT file permissions in Windows

[John Albrecht]

         Glen, 
 
          Thanks for your insights. Judging from your response to me and
Gerhard Fielder on this subject it looks like it is quicker and easier to
start with the pure CVSNT approach. I'll start there and see if that gives
us enough security.   
 
        Thanks, 
        John Albrecht 

-----Original Message-----
From: Glen Starrett [mailto:grstarrett at cox.net] 
Sent: Friday, December 10, 2004 11:19 PM
To: albrecht_john at bah.com
Cc: List Mailing CVS-NT (E-mail)
Subject: Re: Question regarding SetACL cmd script for resetting CVSNT file
permissions in Windows


John Albrecht wrote: 

Hi Glen, 
 
I am testing the setacl .cmd file you created on a win2K PC with CVSNT
2.0.58d. I used the same folder structure you described in your script. I
created several repositories using the repository tab in the CVSNT service
applet, all of them with just the CVSROOT folder and config. files. I used
xcacls instead of cacls. Perhaps I did something wrong, the administrators
group on this pc did not have full control at the d:\cvs\repositories level.
I could not add another repository on this PC using the CVSNT service app
until I manually adjusted the security. What did I miss?   
 
Also,  I assume that since I named the lock server port (2402) that this is
activated for all repositories even if their config files have not been
adjusted?

The script is out of date -- LockServer became the default some time ago
(Yes, in other words).  I have a separate group for CVS Administrators
(CVSAdmins, if memory serves) since our server is maintained by a separate
group.  

The script needs to be simplified somewhat too, since the CVS ACL commands
are even more robust and powerful now.  It's not a high priority for me
though -- once I got my own server set up I posted the script for others to
use, but haven't taken the time to keep it up to date.  If you want to
update it and post the result, I'll be happy to explain anything you need to
know while setting this up.

Regards,


-- 

Glen Starrett