[cvsnt] Does gserver support impersonation (Windows ActiveDirectory)?

Arthur Barrett arthur.barrett at march-hare.com
Sun Nov 30 21:15:00 GMT 2008


Dirk,

Just a couple of quick additions to Tony's reply.

> I'm using CVSNT 2.5.04 with Windows XP (server and client). I have 
> managed to set up a CVSNT server that authenticates users against a 
> Windows Server 2003 AD domain (I'm using the gserver protocol). 

Why are you using gserver?  This is generally only needed when
authenticating Linux clients, for Windows XP client to Windows 2003
server just use SSPI.  If you want to limit it to kerberos only then use
the properties of the SSPI plugin in the CVSNT Server control panel to
set that preference.


> I'd like to use NTFS permissions instead of CVSNT ACLs or 
> SystemAuth=no 
> and a passwd file because this would enable me to control repository 
> access through Active Directory.

How?  If you use SSPI then the users/groups all come from AD and so
therefore so do the ACLs.  Windows ACL's cannot control user access to
branches because a branch is only a concept within CVSNT not within the
file system.

Regards,


Arthur Barrett


More information about the cvsnt mailing list