[cvsnt] CVSNT on Windows XP SP2 PServer Impersonation not working?

[Vitali Lovich]

The CVSNT control panel has:

SUPERSPEEDY\Vitali Lovich which is my admin account (single PC machine).

In the services.msc snap-in, it has the CVS server set to run as Local 
System with desktop interaction (basically, the CVS server runs at the 
same permission level as a System process - when I look in the task 
manager, it's registered under the SYSTEM user, not Vitali Lovich).

Currently, I fell back to using the chacl built-in command as a 
workaround because I need this right now.

I want to use NTFS permissions because the implication that I got from 
the FAQ and various guides is that if you use SSPI (and maybe pserver as 
well), the CVS server will attempt to login the user using Windows 
credentials, and then all operations, i.e. commit, checkout, etc, will 
be done as if it was that logged in user (i.e. Guest) and so that the 
NTFS permissions would control access to the repository.

Glen Starrett wrote:
> Vitali Lovich wrote:
>> The CVSNT service is set to run under an administrator account and in
>> the service log on page it has the Local System account selected.
> 
> Do you mean the CVSNT control panel has the "Run as user" set to 
> something other than (client user)?  Do I also understand you're using 
> NTFS permissions to restrict access to users, or are you using the lsacl 
> and chacl commands built into CVSNT?
> 
> Setting the Run as user to something other than (client user) will cause 
> the NTFS permissions of only the Run as user to be applied.
> 
> Regards,
>