|
From: | Julian Opificius |
Subject: | Re: Problem with admin privileges |
Date: | Mon, 27 Jun 2005 11:57:56 -0500 |
User-agent: | Mozilla Thunderbird 1.0.2 (Windows/20050317) |
Larry Jones wrote:
I'm not quite sure what you mean by "mapping" users. I want each user to have his own login to the system, and I want to control access to CVS repositories on a per-user basis, which is why I use pserver. I need Internet access, which is why I tunnel across ssh.Julian Opificius writes:That's the confusing thing; "id" tells me I'm a member of cvsadmin. Is there any restriction about userid range? I'm 1000, cvsadmin group is 502.In that case, my guess is that you're not using your account, you're using the generic "cvs" account (you say all of your CVS users are mapped to the same "cvs" system user and it's the system user that has to be in the cvsadmin group). Mapping all of your CVS users to the same system user destroys any system-level security or accountability since everyone appears to be the same user. If you have SSH access to the system, you're much better off using it directly in :ext: mode as individual system users rather than tunnelling pserver and mapping everyone to the same user. -Larry Jones
The instructions I followed to configure cvs suggested I use a"userlogin:<password>:cvsaccount" structure to the $CVSROOT/CVSROOT/passwd file, so each user would have his/her specific cvs-related privileges, but that the server would run as user cvs.
If I'm not understanding this correctly, please let me know :-) j.
[Prev in Thread] | Current Thread | [Next in Thread] |