LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 02-13-2007, 07:59 AM   #1
nestorjb
LQ Newbie
 
Registered: Feb 2007
Posts: 5

Rep: Reputation: 0
CVS Login: Authorization Failed


Hi

I'm trying to set up my CVS Repository on a Red Hat ES 4 with rpm cvs-1.11.17-9.RHEL4. I configured the /etc/xinetd.d/cvspserver file:

service cvspserver
{
port = 2401
socket_type = stream
protocol = tcp
wait = no
user = cvs
passenv = PATH
server = /usr/bin/cvs
server_args = -f --allow-root=/desarrollo/cvs pserver
disable = no
}

I checked that the CVSROOT is correct. When I log with a standard operating system user and password I get:

cvs login: authorization failed: server localhost rejected access to /desarrollo
/cvs for user nboscan

I tried with an old repository, with a new repository, I tried to using a passwd file and none of this works.

The server is up because I can do a telnet localhost 2401 and it works.

Any ideas?
 
Old 02-13-2007, 08:48 AM   #2
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 11,516

Rep: Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501
cvs server is using its own passwd file, which is located under CVSROOT. If you want to add users to the server you must read this to see how to create users and using a perl script to give them a password.
 
Old 02-13-2007, 08:30 PM   #3
nestorjb
LQ Newbie
 
Registered: Feb 2007
Posts: 5

Original Poster
Rep: Reputation: 0
Hi bathory

Thanks for the answer but on my first tests the passwd was not created and not on the CVSROOT directory. In my second test I created one checked out the CVSROOT module and saved it and it is not authenticating using the passwd user and password.
 
Old 02-13-2007, 09:42 PM   #4
nestorjb
LQ Newbie
 
Registered: Feb 2007
Posts: 5

Original Poster
Rep: Reputation: 0
I created a passwd using checkout, update, commit. Checked that the file was created in the CVSROOT folder. Tried to login:

cvs login: authorization failed: server odin rejected access to /desarrollo/cvs
for user nboscan

It's really getting frustrating, it should have something to do with the configuration because with or without passwd file I can't login
 
Old 02-13-2007, 10:14 PM   #5
nestorjb
LQ Newbie
 
Registered: Feb 2007
Posts: 5

Original Poster
Rep: Reputation: 0
I checked login as cvs and root and it works. But is not working for the rest of the users. The rest of the users has read and write access to the CVS Repository.
 
Old 02-14-2007, 03:25 AM   #6
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 11,516

Rep: Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501
Your cvs passwd file must look like this:
Quote:
user1:<random chars>:cvs
user2:<random chars>:cvs
user3:<random chars>:cvs
The <random chars> is the password created by the perl script and the last option (cvs) is the user under which cvs pserver is running. Make sure that the whole repository is owned by that user.
 
Old 02-14-2007, 10:29 AM   #7
nestorjb
LQ Newbie
 
Registered: Feb 2007
Posts: 5

Original Poster
Rep: Reputation: 0
Bathory thanks a lot

I figured out that there were 3 things wrong.

1.- In the /etc/xinetd.d/cvspserver the user has to be root
2.- The passwd file is required for pserver protocol. With CVSNT this was not a requirement.
3.- I was using htpasswd to generate the passwords and this didn't work. I used the perl script.

Now, managing the passwd file can be a real headache. If I use the sserver protocol I can authenticate using the operating system user/password?
 
Old 02-14-2007, 05:18 PM   #8
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 11,516

Rep: Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501
Quote:
Now, managing the passwd file can be a real headache. If I use the sserver protocol I can authenticate using the operating system user/password?
I don't know how sserver works, but searching a little I found that:
Quote:
With the default settings you should be able to connect to CVSNT using sserver as if you were using pserver and the SSL layer used with sserver only provides the encryption. The actual authentication against the server still relies on the mechanisms known from pserver.
With pserver you can use the system password file (/etc/passwd), but it's not recommended since it's a security risk. With the pserver passwd you use virtual users that are onle able to use the cvs and cannot login to your system to use others services.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
KDE and NFS - " Authorization failed "... bonecrusher Linux - Software 2 01-18-2006 09:11 AM
cvs rtag: script execution failed: permission denied markpetit Linux - Software 0 05-25-2005 12:47 PM
SWAT "Authorization failed" Viva Linux - Networking 5 09-21-2004 01:47 PM
Authorization Failed Poskus Fedora 1 02-23-2004 09:08 AM
Config problem: "Authorization failed: server rejected access" -- help please! womble_timsk Linux - Networking 0 05-22-2003 05:09 AM


All times are GMT -5. The time now is 12:06 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration