[cvsnt] CVSNT on Windows XP SP2 PServer Impersonation not working?
vlovich+cvsnt at gmail.com
Wed Feb 7 04:41:16 GMT 2007
The CVSNT control panel has:
SUPERSPEEDY\Vitali Lovich which is my admin account (single PC machine).
In the services.msc snap-in, it has the CVS server set to run as Local
System with desktop interaction (basically, the CVS server runs at the
same permission level as a System process - when I look in the task
manager, it's registered under the SYSTEM user, not Vitali Lovich).
Currently, I fell back to using the chacl built-in command as a
workaround because I need this right now.
I want to use NTFS permissions because the implication that I got from
the FAQ and various guides is that if you use SSPI (and maybe pserver as
well), the CVS server will attempt to login the user using Windows
credentials, and then all operations, i.e. commit, checkout, etc, will
be done as if it was that logged in user (i.e. Guest) and so that the
NTFS permissions would control access to the repository.
Glen Starrett wrote:
> Vitali Lovich wrote:
>> The CVSNT service is set to run under an administrator account and in
>> the service log on page it has the Local System account selected.
> Do you mean the CVSNT control panel has the "Run as user" set to
> something other than (client user)? Do I also understand you're using
> NTFS permissions to restrict access to users, or are you using the lsacl
> and chacl commands built into CVSNT?
> Setting the Run as user to something other than (client user) will cause
> the NTFS permissions of only the Run as user to be applied.
More information about the cvsnt